Extracted

• • Target

    5bafd7d7720a0e948a75557cdd60abd616147ffbaea4b443030042591a7e38f3

  • Size

    1.0MB

  • MD5

    b31516afca0f89ba784fd65e9805fdf5

  • SHA1

    5eb5b1160a709bba594571989e8242f9739b15d8

  • SHA256

    5bafd7d7720a0e948a75557cdd60abd616147ffbaea4b443030042591a7e38f3

  • SHA512

    07e329b3aabe1173ee3d4ad84df07688670fce1ae5fc01bdcd437c38ce75bc2963ba54590b0f7fb17ba81e34d0e725dea06fb74329a0282128174084f0b1b1ad

  • SSDEEP

    24576:jyugDeNZB1qu5uXEeB9Zc+0EH0l0dqYz:2ugibB950Ew9ZcHmq

  Score

  10^/10

  redlineluskainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1