Extracted

• • Target

    7693672a33e4e3a5a5d8112620f3f3e188e0e6587ce7546a4dfa6518146268d7.exe

  • Size

    437KB

  • MD5

    f546d3c0f38a4731b4411f4f6580bc25

  • SHA1

    df4e7fa7cab4d4e15a2668d13b907f4e1ccf8c3e

  • SHA256

    7693672a33e4e3a5a5d8112620f3f3e188e0e6587ce7546a4dfa6518146268d7

  • SHA512

    b8b039a79afde0c7f47a6474bfb5a1d1bc4be279da39f679b29c33944bdb3a4844a59ae152097850799cb7ae70245ffa9f103d770cb90f1629843cbb0a44f4ef

  • SSDEEP

    6144:Kcy+bnr+rp0yN90QE8xnlib4q5mVxp2SL1klJ1Ypsb4qPkh4I5gX8Dr+y:cMrLy90Kxwb4xbplLOrodqcXgXGr+y

  Score

  10^/10

  redlineronamdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1