Extracted

• • Target

    c12748db90046b82b19eb35ffb7062d5.exe

  • Size

    770KB

  • MD5

    c12748db90046b82b19eb35ffb7062d5

  • SHA1

    8e143b7145346745f5794ebe663d0d05ae4b9aee

  • SHA256

    946fed7f77da1d255b9d04cb0952c91e3665b657221a11b5a971a74be3f8b0d7

  • SHA512

    c37d85a391d40ed0acd022e37e25ccd54e6bb1f708dc6a2b6dd72cd7b6a938695ceab3bb622dba482cbd1df951e7711d398c0f9c415cf80dd3499d339e35124b

  • SSDEEP

    12288:SMrOy90YfhEcymQ5gBh31BCCNd2u18lhQtfuqBq+v1w39gwutPDwYpzFR3h728Q2:oyfuc7Q55CNylOfuqB2tgwGD3BcFS

  Score

  10^/10

  redlinelampinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2