Extracted

• • Target

    a81972d22bbec6d5d7a194144907b7af3582920740dd262e75ad2f1498778f33N.exe

  • Size

    583KB

  • MD5

    763f94bb2d757bfb041fa56f6844ed20

  • SHA1

    ecaa536a49f57cfa3f4abbe167cd8c3301c6d2d7

  • SHA256

    a81972d22bbec6d5d7a194144907b7af3582920740dd262e75ad2f1498778f33

  • SHA512

    7e24d57735e15a68ebed02ceaab485b588d968ea788470fc7603a1f57a537c18acd48884fd9add42b28ff6d789b4248adbc4c12dedc796161d229a7c3f1f7173

  • SSDEEP

    12288:8MrOy9033s5s9CRNv5HjbmclwkLwKi5cBWDmAmX74kN:SyKc5s9Ov5Hjbpfi5jmJVN

  Score

  10^/10

  redlineronamdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1