Extracted

• • Target

    306411b9b4973f40f454ee04df756769aa75bcd4ebef736221cbf299b57967e6

  • Size

    1.1MB

  • MD5

    7678399fd110a5cad1ec55f04d38e4e1

  • SHA1

    3321b9577ec831ddb56b8e6c9e66de09514ea9f3

  • SHA256

    306411b9b4973f40f454ee04df756769aa75bcd4ebef736221cbf299b57967e6

  • SHA512

    4be9dbcb7984cdde8da08b85838b383c0039bbff5eac7fbf0c97ae268aabf7a9629e4412832678db8555791b3ee27d74932a9b648be53d5d6c8fecbd52bf56e5

  • SSDEEP

    24576:mykqCZXsqedJ3qVUgfqqVd8+ihpfBNawOvibb:1DCuqyJaXfqqVxi/rH6i

  Score

  10^/10

  redlinegendainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1