Extracted

• • Target

    file.exe

  • Size

    506KB

  • MD5

    0f724d78d4a65272ac085236c9caf06b

  • SHA1

    9449892f318709e1abfd33dd059dbdd1de8a0392

  • SHA256

    b7215d29651d883138e7000f2568418b02cb62350924f78ec75b7c7f0d3a9a72

  • SHA512

    6c4e203e8de1c30cb4fc417fb55887adb80682f1c24ff7f2a8786a7ca179369cdbe4c16fbbe0efc154eaac741ff62c3d81132fd2a8f8125613ac1df4ba678ba5

  • SSDEEP

    12288:qMriy90OWwCjyUi0kYkqnDIw4M0/2+Vlnw+Q1:0yywmyUigbDIw7AZQ1

  Score

  10^/10

  persistenceredlinetrushinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2