Extracted

• • Target

    72c899db7032cb42866b853f92327ed84c632dcbe86e35a08f52e20eb8028675.exe

  • Size

    433KB

  • MD5

    d221c7297c74d493a2e4fff0a568728d

  • SHA1

    f9328735cf2e57727055599ca675ed88d4997724

  • SHA256

    72c899db7032cb42866b853f92327ed84c632dcbe86e35a08f52e20eb8028675

  • SHA512

    d894ccfdce514603fe96805572a67eabd789e1996a33f5492d867fbfc355a63b19e9d62feee6ae19b53b9ad587fd3a6526cc4dd6b660de21babf3bf88456ec13

  • SSDEEP

    12288:yMrqy90JWCWbxy59C7a3Y3PfMLmW4gg5A:IyqWCWbsrC7a3YffMKWpg5A

  Score

  10^/10

  redlinerodikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1