Extracted

• • Target

    c1215df9b336b9ead0cd52e2de51eb36.exe

  • Size

    721KB

  • MD5

    c1215df9b336b9ead0cd52e2de51eb36

  • SHA1

    252dffacea1ba22b232e063373ec9a666da7a233

  • SHA256

    1f8a211762e1792e2739d600efcde80aacbf62dbb93fae257c700721b186e14c

  • SHA512

    95f684567930aadfce5f933a29b6ff8811d7c3a1586121d213b4cbbe2cc292d1f4773efd518491a814f60b639524280540dcaf7af9aacba5dced05acb665c77f

  • SSDEEP

    12288:2Mrly90ODaBRSQTiCzhvPxT2888q5KIPkoPkjaDG/d9WHVL5Dwcnt4EA:vy3KSlsFxT2888q5KI82TGF65DBaEA

  Score

  10^/10

  redlinefusainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2