Extracted

• • Target

    file.exe

  • Size

    2.8MB

  • MD5

    f18b7a13b93290e002440df85c878d8b

  • SHA1

    739bbfc982510dccd2ac96bf47e462e5172c015e

  • SHA256

    c144d8f95f85a7a2467ebf1594045ec5340ab0251b409503525ed3947e382a0d

  • SHA512

    6caaeedf702951af6e753912a0e4ab7199d3686c2cdb94d8f7dc0a1aaa6177e37da3d2d7e0cfe2d1aaa5c3fb456655b99bb0f7929dcb4b9db3a4ad52d3a1b207

  • SSDEEP

    24576:XabYMUEBRRPAa+YNYjVSDRfNMm3dnz3t1MCaRhj6rolTXuXutiKqs+DL9kLkkQlh:XqYMUEB3PA8f8CEwroYetiKqs+Dmgl3R

  Score

  10^/10

  redline000infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2