Extracted

• • Target

    719ce53ae8f59243cf658e0503344034fc34bb55c93c0b274aebcc1e2a04ea31

  • Size

    514KB

  • MD5

    11f045680800970ca3dd16dfb37e5f1d

  • SHA1

    4b9969886c5d4e371004f4bbc3d183d5c28c7699

  • SHA256

    719ce53ae8f59243cf658e0503344034fc34bb55c93c0b274aebcc1e2a04ea31

  • SHA512

    942f921448aa6a29565b2350293e886a624ab878930fe96f456daf95801a4087f8193b145144d74d57e08a33f2e71009ffb99da649044746c180b7eb38452b1e

  • SSDEEP

    12288:WMrOy90TJJ204VJ5otYhixnw6O8EbJ27um8tMeiOce+q:MyKJ2fX6Og+6ODbJs58tRisJ

  Score

  10^/10

  redlinetrushinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2