Extracted

• • Target

    NEAS.425d8c9efa48b19a888f7f165d2c32f0.exe

  • Size

    1.5MB

  • MD5

    425d8c9efa48b19a888f7f165d2c32f0

  • SHA1

    33a584dab98135bfb53e539fd46fe0721998674f

  • SHA256

    08f23e63ef45a3062061e105d972a26f30379b83357117359704e50ad3c00385

  • SHA512

    88461b37b10bf288dd973adde6da2f6bffb3fdcba4241fdcc08ca5d3dc2815aaddcf7b46208e65511cf6abf116d52d0331cc2f2bdd6d12e0067ede124f7b30d0

  • SSDEEP

    24576:mylhonEBY+7MK/7XbBPEKHcuQWKNIP4aCY6FHpezj9UdZMSiO97:1lcGY+7MK/bBEKbxKNuCpRWj2

  Score

  10^/10

  redlinekinzainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1