Extracted

• • Target

    93c1cf125b85fb3d837c268f1a522d43.exe

  • Size

    769KB

  • MD5

    93c1cf125b85fb3d837c268f1a522d43

  • SHA1

    021b4c910e6c9af13c94f77b6f5e88a1480c82a9

  • SHA256

    ffca01eab57ad303c53af864d96d53e1fe5339d089ece9c9288d685395588b09

  • SHA512

    c700c65674e875ca0f1a460ac20407a48067806d4f99af805f53fbd9b533de603b491d3f0c439c7203aff86e424fe5d99a9360452413a362ee5aa36d0a63bd30

  • SSDEEP

    12288:PMrAy90FvlyVN8Ha8xmcAGaIevzTUZczWOQO7vw0wRgPoS3bHvit1j:by6wN7gmcOFzlWOJ7YVRioS3bPM

  Score

  10^/10

  redlinelampinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2