Extracted

• • Target

    1a4c0dfd448694ca52e4d9e6cbefde60d127c141a991ce24d86428d218defadb

  • Size

    437KB

  • MD5

    68ca83fba46245194c4476afe51ba49e

  • SHA1

    452443ce8b211e23e9ab1b1051408d4cc8d04ccd

  • SHA256

    1a4c0dfd448694ca52e4d9e6cbefde60d127c141a991ce24d86428d218defadb

  • SHA512

    5435d44227f88f046c1c2014a5b45041fc54caa7e79c3e2a4ac2e724e6b889453c5a36fdfb328900ca47adc3161827b3a64e6cc3a8107406cae943895fd0ead6

  • SSDEEP

    6144:Ksy+bnr+Xp0yN90QEExnlib4q5mVxp2SL1klJ1Ypsb4qPkh4I5gX8Drj:MMrHy90Kxwb4xbplLOrodqcXgXGrj

  Score

  10^/10

  redlineronamdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1