Extracted

Extracted

• • Target
    478978167bbb2e5a53457c8a17c61c30620362bcdbddff815679e334c871b1e4
  • Size 838KB
  • SHA256 478978167bbb2e5a53457c8a17c61c30620362bcdbddff815679e334c871b1e4
  • MD5 235d70e45271252020a22b1a35c0e3da
  • SHA1 1f013d2cd10302e757ff576cf0fc78173a7ea86b
  • SHA512 468f71d9b163c299dcedf66ce99006ef7d2b08df80b967a2466369d97045cc90aa8448e7705b904cfb2a1ae21fbe1732630737c80a28b9e72e582b00587c66a2
  • SSDEEP 24576:/yLZdbdu41jmyzoAOS0yG2NfINiP2i3pE6K:KV5U41jRzowxDoiH3pH
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinecrypt1romikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1