Extracted

• • Target

    6693f925e65d94f729293e571a94efdc804e56f56a1e144f4c569c9319caa019N.exe

  • Size

    1014KB

  • MD5

    0c5e2445eb2c9133509284d060c5f270

  • SHA1

    02ad85bce48abe3b315a01cbf00f9147643a4e9f

  • SHA256

    6693f925e65d94f729293e571a94efdc804e56f56a1e144f4c569c9319caa019

  • SHA512

    3fc7c27249d4059898d24bbb4f90a64a7dc8a14bfb7d18c9912e0627a929382b38460ad927cc39b559bc06415b76a8913a5670e472139e963312fdcd754074bf

  • SSDEEP

    12288:Oy903hVGVmfXjz9M9qYkWbXcv75NAFR7G+DEWjQBsoHYIqfDHCZgJTseiH4lxi:OyQhVN7csD5+FZFEWMmoHYIqLHC2JNO

  Score

  10^/10

  redlinemostdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1