Extracted

• • Target

    d595f92fd64f1992f3cfa556a1213f22.exe

  • Size

    514KB

  • MD5

    d595f92fd64f1992f3cfa556a1213f22

  • SHA1

    124392b3bb25cae2b99058363094c7fd90f6be2c

  • SHA256

    c8e5cd22f608cd7712cf958f6291ca2c805526763a288add257ebbe986d8c781

  • SHA512

    b0b9e90cc216384217e7a1e373808267ff405d8ae87b3161e2eec63001868a66f29aebd2365cc1de078b27dca7c2f5ce08c1cb407153797eb4d0d0ff072b6828

  • SSDEEP

    12288:EmYOKz47wrn1HjWvKPLD9h4lGsN/J+V3hB:9Y47wb1k4pAHNuR

  Score

  10^/10

  redlinekirainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2