Extracted

• • Target

    16d5398565edca9002817ba0c28731cdacb383df9decfa91b97f29cbbdcd1fd7

  • Size

    1.1MB

  • MD5

    2be05be57d7328b74a22f1fa7f475ff3

  • SHA1

    3237d4a6e3614bc97b12ded033c6b4237db769ea

  • SHA256

    16d5398565edca9002817ba0c28731cdacb383df9decfa91b97f29cbbdcd1fd7

  • SHA512

    37b4a9b7717db529cfa37697bb1a7d4940cef577bed86fcff91731e5814209587eae50f5d5aefa7384eafe1fc123e2584018aeddd1a944798dedffad2a46b464

  • SSDEEP

    24576:2ybHqRIJOf4oLppBdDJ1YNcKPVc2gCuafs/k80rqZx2:FbHi/4oLvJuNcKdIaUImj

  Score

  10^/10

  redlinehordainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1