Extracted

• • Target
    61189875b681ed024e83f2d2420d8c68.exe
  • Size 769KB
  • SHA256 d5a456cd04a5d98ee8f53a2b1f5a21e125581663b750d182ab6f6fb1c12c9e7e
  • MD5 61189875b681ed024e83f2d2420d8c68
  • SHA1 9fea4b5097d883f551c9947b824e8e5ad9ef7999
  • SHA512 cbe06bdfd34d89b04a6daea3f29fd1b56084c090faa680043deb6c3b8f500262ed03622bee0cf8758625cd20cd3562375aac179321a98f7700ca2f635f321889
  • SSDEEP 12288:IMr2y90pjr5Xfg76Rc9/vETtEXsUjFSEC386NZ7/N4gql+W/eTOn2w:+yQXfguRc9stEXsAMM6H6dEMeCn2w
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelampinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2