Extracted

• • Target

    21a520c78e32775b6f657fcad7d3a09767b82b2801f7bf22c849546dc6b5e28aN.exe

  • Size

    715KB

  • MD5

    bd8353f3c56f737b4421efff1a9a44f0

  • SHA1

    943a78c7141381ef9437ea3a05297cb9fff78073

  • SHA256

    21a520c78e32775b6f657fcad7d3a09767b82b2801f7bf22c849546dc6b5e28a

  • SHA512

    55b58f6f96710d43505eb8927f861b8b7ed2ecf5b2eda98b4fc77001cbfa0c0f4996251bdfd6dc82a4ae7913b23dd9ca02bac14fdf0434b57cc62b92269b981c

  • SSDEEP

    12288:kMrky905ZGCV7O1RYwuNDnUOierwegK88SfbIPo/jMe/ChjOR0r9EyFGL521:IyGJV7UMN4zLK88SfbI+jMe/3SREyFGC

  Score

  10^/10

  redlinefusadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1