Extracted

• • Target

    edcb08bb4ec55c4e0318981cecaa61252a51e3bdf719e8b073bfaddaf499dfae

  • Size

    1.1MB

  • MD5

    09d9ad3617bae4f07af535e8a7eb0591

  • SHA1

    759126ea236796926c39be17a68cc82b6dc3b760

  • SHA256

    edcb08bb4ec55c4e0318981cecaa61252a51e3bdf719e8b073bfaddaf499dfae

  • SHA512

    94ef83694b63b44eae6a734bf10f9e243ac5072b0166fee79d5bf8069b98d3251ee2157368cb94baec610613cc3641e6b2cc736bd8767aec6b921f147bcd86f8

  • SSDEEP

    24576:+yj2/YCgZy/ZUxSGsJR151y9unZrn2sHBKYLulg:NOYVZcZUoJ29unln2sHBHLu

  Score

  10^/10

  redlinehordainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1