Extracted

• • Target

    7737d039a714c7cea8ae63a69766b9155b902d0e1660d2fb45ab86e94b525380

  • Size

    759KB

  • MD5

    95dbdcc55dbc500642b7ca63975883f0

  • SHA1

    29bd749792863370bf07cac1d98766f3c4839711

  • SHA256

    7737d039a714c7cea8ae63a69766b9155b902d0e1660d2fb45ab86e94b525380

  • SHA512

    7eea95e65f7596cde0de4ee5b837d8ffff21a0416d5a198fff54cf0d386f9437306692954ea68100a637630ca7fefb6df960698c93047b02cf76bdf55533816f

  • SSDEEP

    12288:vMr0y90FmgGN0mV6n9Ii2Ial69xMghb6TPISPwHae6uaLA0RP53:HyAmgqVV6n9X2I66cggTVw6jR1

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1