Extracted

• • Target

    NEAS.deb8edd5b374a96076f2c6f7fc2be670.exe

  • Size

    1.1MB

  • MD5

    deb8edd5b374a96076f2c6f7fc2be670

  • SHA1

    731200452d3e0e9cf126aa460b21cb36d9b3a27b

  • SHA256

    619253945c221845b60f05ae115ac75e0f0877faa4017d5ee6254235436bee1b

  • SHA512

    5bd580dce283d147075ef866486be2a217dc0c92f31d0b398608f5bb331b4fbc03331037f54fe6478266108ebf66376a8c1a6760427db6e76a9a0bddf9a1160a

  • SSDEEP

    24576:Myk33pCdCjbbnS2/UxKiKj3rwDKV+3UJRNetVYRyxRm0ZQBifwx4X5UG7:7kn8kHNC9Kj3rSKRbNejas04pUG

  Score

  10^/10

  redlinekinzainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1