Extracted

• • Target

    05cc30baa704cf533d3e024eb568ab4afdaf09cc4459ef34bd28a23d55e8b7df.exe

  • Size

    479KB

  • MD5

    c04e97535856457c8addd8e890049d63

  • SHA1

    9519442c864898a12b6efecf1ed9a40de5de90e7

  • SHA256

    05cc30baa704cf533d3e024eb568ab4afdaf09cc4459ef34bd28a23d55e8b7df

  • SHA512

    8ba6ab3e5886959ec5b87d5ed8cd1598ade61ce17e9f9cdfa394e6244ea92b5410a31a1a83865779b2373ec375371b9af81e4225d036bb65e8624c37e9b74c94

  • SSDEEP

    6144:Kqy+bnr+Xp0yN90QEsxaYDmanepEg1jlp5Lvm4x478WTcWVpGFXlykRLvp06gY/p:SMrHy90cyaYjb5C647He5O6ge9mqUU

  Score

  10^/10

  redlinedumuddiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1