Extracted

• • Target

    61189875b681ed024e83f2d2420d8c68.exe

  • Size

    769KB

  • MD5

    61189875b681ed024e83f2d2420d8c68

  • SHA1

    9fea4b5097d883f551c9947b824e8e5ad9ef7999

  • SHA256

    d5a456cd04a5d98ee8f53a2b1f5a21e125581663b750d182ab6f6fb1c12c9e7e

  • SHA512

    cbe06bdfd34d89b04a6daea3f29fd1b56084c090faa680043deb6c3b8f500262ed03622bee0cf8758625cd20cd3562375aac179321a98f7700ca2f635f321889

  • SSDEEP

    12288:IMr2y90pjr5Xfg76Rc9/vETtEXsUjFSEC386NZ7/N4gql+W/eTOn2w:+yQXfguRc9stEXsAMM6H6dEMeCn2w

  Score

  10^/10

  redlinelampinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2