Extracted

• • Target

    38a69dbb581af4f2f9dd2762e58adadb968e62f36b57143198bd2f45b5cdbdc1

  • Size

    677KB

  • MD5

    c3142122f921f58ae8924254f5ee12fd

  • SHA1

    9ca990a60895be8a23c87fefe429fdd8c36875fb

  • SHA256

    38a69dbb581af4f2f9dd2762e58adadb968e62f36b57143198bd2f45b5cdbdc1

  • SHA512

    8f4668661f9bfde28f489d6bf0c6c7cecb4b3f2702b42fe3f3c397a6cd646c02065e5637b6d9fc1a031daaf8ef626bd7f547273f38c9b674f2a7f55fe84bfcb7

  • SSDEEP

    12288:rMrqy902F157ZSS1ajQgNp6gI3XEgVTsRJYJMN3/f2+2z/:VyNF1pZSQe36x0ghsRJYg32d/

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1