Extracted

• • Target

    40210d997d0e112a3b129ad5bb80cee60769fe007c79f04653a748977b51e113N.exe

  • Size

    438KB

  • MD5

    7c1e27d63057f147b09635a59ff74e40

  • SHA1

    6ced602148ca2b755db6edbf15f2b636e9f5472f

  • SHA256

    40210d997d0e112a3b129ad5bb80cee60769fe007c79f04653a748977b51e113

  • SHA512

    e55d5a9687233053eb23472f1be4a457425d0989bd9c2c414a03ed32d13683bfa3ef4bad22656d7575114c8a3c4aef04dd0179c14a3c4e191cb62d94c4a27268

  • SSDEEP

    12288:yMrey90u8pKhu9rZHV5wUBeI6ZTrYDw+KaPDrtgRMR52:YyL8EhYrVVhBN6ZTrYDVKafqi52

  Score

  10^/10

  redlineronamdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1