Extracted

• • Target

    ec803fbb76a1fa19380f671d70906ed4079e720618daefcd871ddd710d8dc315.exe

  • Size

    1016KB

  • MD5

    604a9ed304bf0fa5e8f3eaeff075516b

  • SHA1

    1bd1743473025471ed157b374c5cdb07d62d353e

  • SHA256

    ec803fbb76a1fa19380f671d70906ed4079e720618daefcd871ddd710d8dc315

  • SHA512

    a4a95143aaec88c419d59ce60d9e63ac3252bdfce719fa81c9787d8dd5cef276956ffd870fbdc526a6cf32eca7f85619a7322ecc8c248423a303ed3ba8fc21e1

  • SSDEEP

    12288:Sy90N4nVmQOXQVchhK5NQtV8Up2ZtgztiZMBAr4deDE2rCi6t54c7ZDaYQdZVRex:SyZ8QwTWHQP8UpA5KAr4dY6tqkVeQx

  Score

  10^/10

  redlinemostdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1