Extracted

• • Target

    1b4d67523602523fb1ae985471afd79a19e21c87143c9b2535c635bb7d8e0611.exe

  • Size

    829KB

  • MD5

    b3d6aa2dbf077f6f31b0211ea8efdafd

  • SHA1

    9b9a005fbcf49e634c414ab7b02833849d6d2a40

  • SHA256

    1b4d67523602523fb1ae985471afd79a19e21c87143c9b2535c635bb7d8e0611

  • SHA512

    7fbeb562635ab2a76decf122275d4a5ce5d97b339cd3c8bf0ce54f9f3e7e0042ba0ace1f97429e4ee29065239c18003b81acf5922417f2598e2b37c4592c4f16

  • SSDEEP

    12288:MMrry90eW8U0cWbBG0NA8xdFvDz+BwCP0iIYgJnydFtt88DQVLR5VCV4UPJv:Hyw8JcW40O871um4jfgdqy9uht

  Score

  10^/10

  redlinedugininfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2