Extracted

• • Target

    f99f8eb87369eca8dcb8c1ae4c964f39af5a2536bde56.exe

  • Size

    769KB

  • MD5

    5e8f9f43fe655de6b560bd2357597ecd

  • SHA1

    3958caa1d5d384cc5f414603a2a7f1ed98f9a6a4

  • SHA256

    f99f8eb87369eca8dcb8c1ae4c964f39af5a2536bde56d95b67d65caa72a75e3

  • SHA512

    6702de8274a073857ef613dbc09c882cea995f469e0f637f573f1b0ee127af1644ebaa00eede5fcc412a97e82a5b3a311054394617ae6446ee99b99ac13c5713

  • SSDEEP

    24576:oyyDEgGAo0VHWMuRxis4kUZ+dxVobDuU:v/gNVWMun5UZ+aHu

  Score

  10^/10

  redlinelampinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2