Extracted

• • Target

    f72a71a33ff4d6991342c5deb2937834.exe

  • Size

    517KB

  • MD5

    f72a71a33ff4d6991342c5deb2937834

  • SHA1

    1225841bb5b1c557d7d41a34a4e5a84b809b2696

  • SHA256

    f0cf89c10c8b6614b8b36561cecb29e0654d0cf827c4243bd455a1bfb1dd3b48

  • SHA512

    21dbcbfe2ef395ab3bd6af211d22830386b2913d18b51ef327654680d26b7b24753d28afa7b63bac56b9963c2cb2d2c9ba9a3ca594995126b8f2f69092556a65

  • SSDEEP

    12288:nAfkfv1aRdnQgbgUHmCrG7WFQGAsdrGb3EgN2/O2CXQ:nAfuv182g8UHmCaKdO0/wA

  Score

  10^/10

  redlinefurodinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2