Extracted

• • Target

    06a906dce9f19a4684d627900528b3fa00c8c9962cb75273130ab85e32a28de4N.exe

  • Size

    764KB

  • MD5

    92af0a5b9b2347ef6727a4afdc1b3411

  • SHA1

    605672f554084e18f54182fd6417ab55a4917e76

  • SHA256

    bb6472593d0116059f976a544317be720ce932e16a7a6f5244017aeb091f3e90

  • SHA512

    15714eddf58713c03c1ac25aeb3951a16f0eda93b7dcf707fada1d63bd4000e3c0d1f5185c7622d91de2d99cb50700e0d15b1ea40c05839f8049d07dc159c679

  • SSDEEP

    12288:RMr1y90eBOZx9EADWO06D4TnL83mYJN7O1JyAtzFTLz6olmjBAG0rtsZsPd:cywZx9j6O0kYnL8BfoUAlN/ulA/1Pd

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1