Extracted

• • Target
    a677ee95a7e4d4a71c374565c3ade125.exe
  • Size 771KB
  • SHA256 dcd412b0f08ce1f65f9dfec504f95307c46bffac7dedc26b2a444cf77a63aa88
  • MD5 a677ee95a7e4d4a71c374565c3ade125
  • SHA1 d6a984d14ee35778637744c0aa31f8997ba625f3
  • SHA512 5f641fc7a1be1fdd1d2e6b8524170849273121e3cfa029833f76c4e04d135524f296e083ace96cd84e4ea95470e5c4f15ca0946e868e242b50b8064f5a11c9bc
  • SSDEEP 12288:/MrHy90YCYlSpR3SVqgS8ao6BaavvJ58+FWM2LV7pmvY3pTYAtXtUIG0t:YyAYIR3SVF+R5pFyR7pmvapT95ue
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelampinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2