Extracted

• • Target

    KasperskySecurity/KasperskySecurity.exe

  • Size

    4.2MB

  • MD5

    7b964a77140ecb6fd10d488db67f4ddc

  • SHA1

    7defebad9e62037980eca8c88a814d6302a7996f

  • SHA256

    8d114d5ff304b27af3934844fd0261dbb45a4267208a82a2fc360e2a4bf257b0

  • SHA512

    2af13dd4389a575faa06d8750cf4f868fe817f5471bfc0f4b271a872fef71d8db30c63447662a975f15f4b16035952ee8658c209e722942d6025a24d40f0a3be

  • SSDEEP

    98304:MQAkEo3iq6JiAACA2TFHQscJhj5jsft1EIFjVWJyMR:MQA7YpUPA2wtjsbEoVSFR

  Score

  10^/10

  redline@sc4lly1337infostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Suspicious use of SetThreadContext

  behavioral1