Extracted

• • Target

    a63413211b97734cd7c892fe21913940_NeikiAnalytics

  • Size

    267KB

  • MD5

    a63413211b97734cd7c892fe21913940

  • SHA1

    76094c8c0e192c2bf7d20f8723b3208541f1cee9

  • SHA256

    e615acfa74b67dc800a50069bfb777ef845755716b65d8231ac5d18de19fd058

  • SHA512

    504e0fdafd2af1c40c7a525e83f10a0fa27cab96982875c4df975d48030aa0c528caad952fe17695976f8b6e80b9588f05d0150972e35ab11a81f74bfe12dbed

  • SSDEEP

    6144:6SnEWzOQed1/zlIoJEgqD/7MXCoI5KbL1XoRVAqCnnmKU:bnBzOxhs/7MXCoawL5o8qnKU

  Score

  10^/10

  redline5345987420discoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of SetThreadContext

  behavioral1behavioral2