Extracted

• • Target

    x5542963.exe

  • Size

    854KB

  • MD5

    8d31b2b7838b476ab3b0daba486ff72d

  • SHA1

    ab04b9b6646844e7ab747f8a767a1d33b4841e75

  • SHA256

    41ac177e6b0ec162b944fbd9a4791d4f4c0fc8a0ae99da40ee9bfdce9a93a833

  • SHA512

    6cc4160e62c1c63a6b327c98b69987e393e1c36ab1cec356a0ea47e845dca6c9c155947c2e878c65ef0b78d1d36dee20a77e665429c44d95a2ff055156d4722c

  • SSDEEP

    24576:IyEYpyfIt9Y4lxir2chkQceJQYphkSzM:PEYpdp+2ch0ehphkS

  Score

  10^/10

  persistenceredlinetuxiuinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2