Extracted

• • Target

    13122cb339230f99aef3a281b3291e1fd3c911c04691f3cbdd343c8309274ff4N.exe

  • Size

    304KB

  • MD5

    b521fc125030cc30073d47043ee647f0

  • SHA1

    b5897d93f0b9bdca33e2b0932a31c0ec8dfb45fc

  • SHA256

    13122cb339230f99aef3a281b3291e1fd3c911c04691f3cbdd343c8309274ff4

  • SHA512

    6c1a03a8cffed5e8fcefef27c924cea823b8e304cc451b4d7250efa722a9d7d599eb2b6c8bdb67a0a449f7572956a374e7a5565ea87e36aff5fb753fc974dd3b

  • SSDEEP

    6144:KZy+bnr+Sp0yN90QEFStrUjeauxXPbOtBhOBAb7jaw:zMray90r0QtuxXPbOPUBAPuw

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1