Extracted

• • Target

    0c2914c3acfb44bba4cfd496be1fc45ebdb0dc198825a2ad8c71286419ae28d6

  • Size

    771KB

  • MD5

    6c30bb3dec0e82a861ebcf1c5fed4975

  • SHA1

    976c2e28b88c3d2ae9b64dc24705bc765a79cc25

  • SHA256

    0c2914c3acfb44bba4cfd496be1fc45ebdb0dc198825a2ad8c71286419ae28d6

  • SHA512

    cbb8c9263ed3de3b00440a2b48823c478646884734d126a3c811a3c55b2c44f3b2d343e460e8e9a96c6e93836f083266e2eacef6bad23700756d9e2a5d567c37

  • SSDEEP

    12288:zMrwy90bv/isnRFvl9yOE40xmOLbErHJBUlW8Ajy7ZF5/ulW1YuDadz:TyhsRxl9y04xbsHJBUdAW1rNGz

  Score

  10^/10

  redlinelampinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1