Extracted

• • Target

    6701f5208ff8235afc3565242970fc565f9b4d0628e5ee121ed3fa376f60c34c

  • Size

    439KB

  • MD5

    5ccf9539ffc73309b034962f4a51f52c

  • SHA1

    6f7915db09b35c30d5d9241b2135b22943d4c0ac

  • SHA256

    6701f5208ff8235afc3565242970fc565f9b4d0628e5ee121ed3fa376f60c34c

  • SHA512

    0fac634659c72aff40b3469278976e5787dc63efecec4ec51758e085959d17db035c8ed7da0ef23c15891169d9381497c66eb19ae6c3f259b277acec2ea94ae2

  • SSDEEP

    6144:KLy+bnr+qp0yN90QEm/XODku14VWPWmzn+jkBBy56WNLzqnIB5cQvncIbo3:BMrWy90UwNn+SBO6+qnIr3vcL3

  Score

  10^/10

  redlinerodikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1