Extracted

• • Target

    636785ca16f42956ec401dbe4a13e3beafc493cb7067950b526a10d4e36d52db

  • Size

    468KB

  • MD5

    a69104e0e3e96e209d6a18af09f579cb

  • SHA1

    96516374857591eea074ad41fb7b6ed2c5567e73

  • SHA256

    636785ca16f42956ec401dbe4a13e3beafc493cb7067950b526a10d4e36d52db

  • SHA512

    d6967c5bbcf0e7ca648a7706fe978086759d44ffbffc3703f223b4ba05ee1a6868acfc6794cdd3d4c783d5c8ecf77c621db219a46fee4b9f59e7c4ab1bfea1bd

  • SSDEEP

    6144:Kty+bnr+lp0yN90QEi0jWNFsVSodqM+Wie/v1XE5kFpzCxqjTeWFdft/+hn5Hurd:bMrNy90s00sVysie/vWuFpzCy9C0977

  Score

  10^/10

  redlinefukiadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1