Extracted

• • Target

    WQ2uq3ad.exe

  • Size

    1.1MB

  • MD5

    c28ae43061a1baa04dbdc08c0696d803

  • SHA1

    69cd42224b64d8705576c3e0dcfe58f2947b789e

  • SHA256

    8b0d38f06198d47cf128e040c9c78f590b8f2eb92ffac5cfc6d1edd7e3c8a4f6

  • SHA512

    0c00352353a055083446b74fc7cc034ff9f4b1a9b1f0975393a1ada8e966404cd7846d40da0082b9fcf1413fd431c03f458e5bf10bb6ad5091cdf7a3e7941f13

  • SSDEEP

    24576:uy5xxnjhLfmgvTQkx2+ueZpX0QKNg6H5Em39XX4t0:97agQkxLRrn8g6HOmtn

  Score

  10^/10

  redlinekedruinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2