Extracted

• • Target

    29c54188cd8c63d1062f98bc5d0f1b880d11442d83196649e1a7d6fe2651c232.exe

  • Size

    371KB

  • MD5

    3f99543bcc9392a4a9abbeb35d1176f3

  • SHA1

    833f40d2c67179425d6abef190cb0405a70239cc

  • SHA256

    29c54188cd8c63d1062f98bc5d0f1b880d11442d83196649e1a7d6fe2651c232

  • SHA512

    cda1a915d9529693b908c0ab8c330422c7852ff57401cf13c5233551b61f1469db011b8cb9475605303a86a3499e8549e9059caf46a4917527d01bf495ec975d

  • SSDEEP

    6144:k/p0yN90QEUmKItMqxYr49Xq9pRHINA4t2qEtMcCLiqOPpp:py906SSE3oHVqKKLaPpp

  Score

  10^/10

  redlinemostdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1