Extracted

• • Target

    second_stage_2022_09_27_4c3fa462636d96c4bb8ffe059ae9e097_2022_Mnew.bin

  • Size

    2.6MB

  • MD5

    4c3fa462636d96c4bb8ffe059ae9e097

  • SHA1

    ec763fbb37c5136f409ad78e3ef681edf280fb9d

  • SHA256

    1e6d06c2a1bf9985e3d413a519bf558368bf3c5786a0c6da74be393b28658394

  • SHA512

    1c34a8d7623b96dfa2e405651ff91f0a818da777557b6fd406207fddb679ae7f058a618b3e0d85e76d5d88dd8062e38ae41485a0b11e0ae4737d5f98c1853b93

  • SSDEEP

    24576:EtJpCV6sd32jQYiYPlpogq7MP1dJc+vTqLW6GgkFnKGJLOUl3RuQ55313g:wD06sx2q+rAW63kFnKGJ1l3C

  Score

  10^/10

  redline981705428_wsiv2wquinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2