Extracted

• • Target

    j7879897.exe

  • Size

    386KB

  • MD5

    78ef7ad98bd03318c7af3507b2c4fa4a

  • SHA1

    4a11c878e0c26f1ddfede813483b9eb1dcc73abb

  • SHA256

    31d41864fd9a3baf205276e3b53824910d5f8c77469943d2f16649b9e3c77403

  • SHA512

    8acf1c0d71c0234393585ae6224205455e591783aacbe3da136988c0a37e84190d5bb6a1ab668b6c2af3429667dabd5ab576f6302e1d7179ff96376ea301556b

  • SSDEEP

    6144:KB88XN8YyMbUkP9cV4at8I6oDiTBbnIYDn/mxNGSCXgaNyMLn1atZWTRXQ:KlyYyMbUkdath6t+xNGvgaNNLn4eTRXQ

  Score

  10^/10

  redlinegendainfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2