Extracted

• • Target

    NEAS.c1743ac1b6806a72b8b36eacd0cf81a0.exe

  • Size

    446KB

  • MD5

    c1743ac1b6806a72b8b36eacd0cf81a0

  • SHA1

    33be65e2ad082f9383a5b0d23fb89d282351b5ce

  • SHA256

    436408dea6d1e1d0186b03589ad9914ce253dbe2532224f58dd2c103e1363e37

  • SHA512

    76446f84612eba9d4bb227cfda5dadff1fa570ba196c92982dea94a5fa01125dadc0ead3bd6a9c19e7d9380ccba1ec9ca441d46ff2c421e7060381e79d16d211

  • SSDEEP

    6144:Tw8mapXZoDa0KaibByEWNM+HZyBFmMAOS/4Rrq1aB3sZR0ldIEGR+n5:UatZoDHKapFQokqNR0Bmo

  Score

  10^/10

  redlinebrehainfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2