Extracted

• • Target

    6e52623e20133000d7ac05223f999bb6ac813b124a8a2ceaf5f71098bd1bd352

  • Size

    567KB

  • MD5

    3a970eab241cdd7856b9273ee874968e

  • SHA1

    b16da4acac823e3a4570713ba8ecd2aa82914b27

  • SHA256

    6e52623e20133000d7ac05223f999bb6ac813b124a8a2ceaf5f71098bd1bd352

  • SHA512

    8442f60f13f3cc0dab782ea1cfca4c5bb39d630715aa77014db7494f0fe18221567821f25048b536562a4dd6245983c578ba03653569826b454e5d83baec8f43

  • SSDEEP

    12288:pMrgy90U917FPRKYVB0On8+lTmfd48MONSekP5m2xfD6:xyXVRKA0OnW68bNSvm2h6

  Score

  10^/10

  redlinetrushinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1