Extracted

• • Target

    71ce813ed7e44b990c9f69fe1157c0899f4912dcc99fdf4b87ea074d0b9e78ab.exe

  • Size

    6KB

  • MD5

    deb4b9e51f7c5de99e93a8043644847b

  • SHA1

    0a7b50a1adaf90db971d7d44539e9618467c0feb

  • SHA256

    71ce813ed7e44b990c9f69fe1157c0899f4912dcc99fdf4b87ea074d0b9e78ab

  • SHA512

    d3ff51a204cd97a364d08ef20f6ca64e3209c5749d6eb0b6d55bdeefdd0ab31176427de67a3ff91463b459c5ee53e4340a48301bc0751be8c9652ca1e44eab1c

  • SSDEEP

    96:cDD5/TKf21gKbv5z+jLkG5wFDnLj7K9K8OHPl5TzNtv:E5/TgSzKLkGWRnH7KTOHt51p

  Score

  10^/10

  discoveryredlinecheatinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2