Extracted

• • Target

    e01204beb5fc8cae5d39dd316c744784fd58e10cdc59dd83137de73192435486

  • Size

    479KB

  • MD5

    95a75dff602c460433500f604f72bb66

  • SHA1

    9f6807dc26b665ee4abbe59b9d030c077c87e9e0

  • SHA256

    e01204beb5fc8cae5d39dd316c744784fd58e10cdc59dd83137de73192435486

  • SHA512

    c494416c8cf7a9ded33e2f7dc48f88a056600d80f22cb35ca7d12decf6679621ef084c842c799f0ee6734539412fd4d0941de30a23c485078de317071f066ed4

  • SSDEEP

    12288:EMr1y906H6EyWgyNAv2BHVX8Ept3aKOIJTvKvo:5yPH6pWg+PBOEpt3O8v6o

  Score

  10^/10

  redlinedumuddiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1