Extracted

• • Target

    3bae1c68cf5e422c1a61ba8be07c1fb277af7df63b7f381c742f2651d72cd2c4

  • Size

    438KB

  • MD5

    ed53e9c220ace0a3ba72d2feea6eb2b0

  • SHA1

    73fb6faac6f5c38f85e62c414d7721b2c4c66fcf

  • SHA256

    3bae1c68cf5e422c1a61ba8be07c1fb277af7df63b7f381c742f2651d72cd2c4

  • SHA512

    5c4fe01d43f95de04ba1d2cf142d758aab7694ae4a5559baf8c61848e8a9a18bffcce65d1874643a509a5d6c7d5ae4d762221330920863682d5bde9131074e33

  • SSDEEP

    12288:3Mrcy90F1jHYvyI6WkQau05FksRl710dhG:nyaUvSnjksP710rG

  Score

  10^/10

  redlineronamdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1