Extracted

• • Target

    4ecf3f6da745d90f98134512bfb0ab0513086ce2fce33fbce968a80150ea61d3

  • Size

    509KB

  • MD5

    67a1a7cae6ea3b65bfd86312c65b2c50

  • SHA1

    37e7729ae113353602a9798b3a14c13c6f669178

  • SHA256

    4ecf3f6da745d90f98134512bfb0ab0513086ce2fce33fbce968a80150ea61d3

  • SHA512

    da06322dcd2c7ea86148f731c10aa929b03178e0591e34338f2cca54204fb979d22d3fdd383cd244578b790cfc9ab9e8cad50c948d7c4b391cd94a4163b8677d

  • SSDEEP

    12288:9MrBy902861He/LJinMYsbvnIm4GZTZVAJ+5:0y38IHiLDzjIzaZOJ6

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1