Extracted

• • Target

    892661cb002e49e414967670dec02ab8f0c84d4405251d8687a80163fa99a61e

  • Size

    772KB

  • MD5

    2643fb3a30f125efe0423dc7aa2c36df

  • SHA1

    a9a1ba318f1df851bdcd3b0d00f63fda72c41c61

  • SHA256

    892661cb002e49e414967670dec02ab8f0c84d4405251d8687a80163fa99a61e

  • SHA512

    e462761f1dbd9b64fb15c76611ebcfcec266854d7118151a7996e616d46bf0fe127900e735f3d98b138d4a575fc1de4b64f1dd7db908fbd8bbead8cc51c1b422

  • SSDEEP

    12288:zMrjy90kKjZ6iQTtMlLr47sI9osNPxk4TpqYR2doYuBoRZsADxvRc:AyH4eTtMZrOokxPdqYMnuBoRZXvS

  Score

  10^/10

  redlinelampinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1