Extracted

• • Target

    c14f785a7001b3ede5b9e0c337bd2675a45c63b7cf9fa.exe

  • Size

    771KB

  • MD5

    9deafb4e1006795e7f23f944063caf96

  • SHA1

    d2ce67d027581be78b59a68fb581a98f03313c73

  • SHA256

    c14f785a7001b3ede5b9e0c337bd2675a45c63b7cf9faf801ce1675455496ad7

  • SHA512

    e0464358ba5239de749204078e3000449e69aafe004640ea04bf2f034a01a5715740dcab40622f65af1583a84705d7b53c40bb7e1c2162b7437003204ca801f1

  • SSDEEP

    12288:UMrIy90duxg2th7O233mLTdoQOdfKDTKrxQTbZsYjvoAh/jBqHz5NMbfZ6wy2UL:EyMux37Oi4ajIurImYboAh7ItN1wyb

  Score

  10^/10

  redlinelampinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2