Extracted

• • Target

    e7827073687f15996c08f35d485f1e5ff20f57de393e14223d253aa740976849.exe

  • Size

    5.8MB

  • MD5

    927a3810a1d806ff3a25b59fc45e36bb

  • SHA1

    b0a6b632223f5dd8d9378e1a2cd12d088017b117

  • SHA256

    e7827073687f15996c08f35d485f1e5ff20f57de393e14223d253aa740976849

  • SHA512

    d253cdfa2896a4c51ccb2ac93bab101a658576b27bcfbf2ffed5f17caa8559518f7decc951677eea133c036d987514fdf0bd4044490b21081d8dd7e3257cd208

  • SSDEEP

    98304:l9wXZutWQszZ8lqCMHDkwu96IowU4YlQ3d/jtXDuRzNWEllsHwvu7kh4aqDTF:MpzAqCMjkwcAQzuRzU8ruqK3F

  Score

  10^/10

  redlineprobnikdiscoveryinfostealervmprotect

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect

  • Suspicious use of SetThreadContext

  behavioral1behavioral2