Extracted

• • Target

    2b1d36fd7aa671cc8e0549345b02e9cddc2e00dce00268a647e89c0c976b8b0d.exe

  • Size

    713KB

  • MD5

    eaaae93cd2d238f68d7477c9332a7df5

  • SHA1

    40fb01131ac0059dd18a2f6fb57f3b8b4a2ee8f8

  • SHA256

    2b1d36fd7aa671cc8e0549345b02e9cddc2e00dce00268a647e89c0c976b8b0d

  • SHA512

    8e6b1d9cbf2fa1dd5a1d288db0216110bded50461b7c35aa532f6ee642b3c74634871778e82660a30f93c2bca5d6f7ac95d7e0eb75996923545badcad754e69f

  • SSDEEP

    12288:fMrYy90kot2xud1z5NWKyLGo99Os+cr88G1hsfQcYp02YD35HsQ38vs4Inb:Py1tudnN6LGo2s+0Yg/+Yr5HslsP

  Score

  10^/10

  redlinedugininfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2