Extracted

• • Target

    c675099c1e7163239186019285c9d47dce829c2601e639cf9c50fff04e4c5d85N.exe

  • Size

    510KB

  • MD5

    206a0d4e802a16815331691bf2fffc0c

  • SHA1

    5a30039fae13f756aaeeddab44188e27a865b231

  • SHA256

    3fea72f95a8702933c3524ce8954476bcbf172375baccb3543f7ad765307260f

  • SHA512

    ae533e152f5ab21cd5c4325fbfd8724abf7991f2bb54b3357ae006ee37e75dcb1320ff2289629e8d6a8e0d0d75a9580531d678e5b7b87ce3efedcd0b8310be52

  • SSDEEP

    12288:oMray90ax2MZODIBX2m1xgqM1Ck32dQ31E/My:yyz2ME4yB732O31wMy

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1