Extracted

• • Target

    0ac87531ee9780ac32eb34497a08d435ae9f13fc2889c040e1ac5eeb868dcd73

  • Size

    929KB

  • MD5

    de76735dde6c202b08fde97344165555

  • SHA1

    9facf9fe9a878b94c77ef18af8eff2760b0d924d

  • SHA256

    0ac87531ee9780ac32eb34497a08d435ae9f13fc2889c040e1ac5eeb868dcd73

  • SHA512

    e45098c13a4f61d46b2153c3706f06464df86a163c548c77d07bd1c398a0c2776162a3783be39fc9557ddeedadbf5496926393028a49fa08c0e085b38d65ac49

  • SSDEEP

    24576:uyFOeOUor5ys6oLRKZSed3toAOT3tROEMe+l9:9FOJrUs6IKLVap9a

  Score

  10^/10

  redlineluskainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1