Extracted

• • Target

    57a359498b0c0268fdb0e39ad06106dfc325804a569d305b0537e500b73f4428

  • Size

    568KB

  • MD5

    7a08a3c882b05ffb4cc2a74deb594d70

  • SHA1

    a34039c8671f1ab0e41f14f68f538d5051a551b0

  • SHA256

    57a359498b0c0268fdb0e39ad06106dfc325804a569d305b0537e500b73f4428

  • SHA512

    85a1299261dafe0e08150ee4ab0ecedfa72c6db3ccf21539c3e079f6f03a0b3ff9adfa35997f1c322e16c4e171f9b7c894020d6c3ab13a6ae35f297330ab40dd

  • SSDEEP

    12288:oMrUy90zLqrX36+Eir9MLoOMmu0R5o7k9/NDRojy4zOh:MyKL2HXpMLS0R5TtRblh

  Score

  10^/10

  redlinetrushinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2