Extracted

• • Target

    4a3208f4e444451187d72ef973e9389cba39dd3f79ea0163952945795093ff05N.exe

  • Size

    520KB

  • MD5

    cf7645fd5aacbddc2aaa6298c38ab0a0

  • SHA1

    87f1a1948d352b5fbef67c6c0bb51a95e435ac70

  • SHA256

    4a3208f4e444451187d72ef973e9389cba39dd3f79ea0163952945795093ff05

  • SHA512

    aec3ff7da3f3ee3ad5206ab4b09e0dbd1ff60a43640e5ead2d776ad3f08aac77baefc1da1f6fb8936b4e29f9c8e366ad75956dcf2fc32a76937b49f601bd2c74

  • SSDEEP

    12288:oMr3y90MvpojAn5qe8nTRdxWMseUZ8/l+y:vyVhnYfnvie0vy

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1