Extracted

• • Target

    3c456a258a27736e1ef8f9f1fad6167412362e842053107d0de08c2df5fd4095N.exe

  • Size

    1.5MB

  • MD5

    15f4581662a1bdaedda76be5a0c7f680

  • SHA1

    55cb2a8af029ba87786bea1b8ac943d2d6d44ac4

  • SHA256

    3c456a258a27736e1ef8f9f1fad6167412362e842053107d0de08c2df5fd4095

  • SHA512

    6e55d32a00d14d7db1d021d02e2fa3fbfb4fe7828a79945855d1275dcbb979ca916a27d55399332f7f9d209b1cf2541a5d9e4bfa4837e31f6b961126b2a34686

  • SSDEEP

    24576:my4pUGOMDtlDJ6DoKMn5Lb/AUYmnjc4TIdXKu8SDmlMOqH/krSRVs6K9oQ+sTCXr:14G9GDJC9MnZ/004caXYqA4/kQVQW+T4

  Score

  10^/10

  redlinemostdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1