Extracted

• • Target

    f09056b42deee674a96cf34a57a8247a1485b559ce5afbffae4942057f5135ab

  • Size

    1.0MB

  • MD5

    38245a63ed4c5c803fc8bde8967a88ff

  • SHA1

    38b412cde27ec02e05f7eb2d61983b74f50ae289

  • SHA256

    f09056b42deee674a96cf34a57a8247a1485b559ce5afbffae4942057f5135ab

  • SHA512

    e92f5e1a07afbcad8ae829b914ce60edcca7d65128ae1261f1e2715dcd5c30f07aee8263bd2f516205737b52c9178b8d3555a96e7b105fe427a716235b42dcb3

  • SSDEEP

    24576:Oyd4tOcwQiIMa6BdpBFTkIfyJiDWbMzY6LzaP:detOcw0MXB0If6eWSVLO

  Score

  10^/10

  redlineluskainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1