Extracted

• • Target

    21378ae1b816186a21a897a26d943f488090eab06a97e9ed3b3a5c0bfbc2ab02

  • Size

    511KB

  • MD5

    04370587245f829f291d5152699c9d0d

  • SHA1

    1cb1f75e5ff8faa215a1c62afacecbd40445bfd1

  • SHA256

    21378ae1b816186a21a897a26d943f488090eab06a97e9ed3b3a5c0bfbc2ab02

  • SHA512

    055090971db619a6ae92ee6677317619a3d1a6c1d4c3dc582f0ef5c6320d4972ccc9a4d639cf4e454d986f3813e739730169b144d93c0cc342dbee486c1a0960

  • SSDEEP

    12288:RMrdy90gteSBlqgGSbDaumn8sDYevZTYV9fZR6p6:0yTA4GSbDaum9DDvZs3fZRO6

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1