Extracted

• • Target

    4840c08f8c186e48e6da922f749c8fd3.exe

  • Size

    2.6MB

  • MD5

    4840c08f8c186e48e6da922f749c8fd3

  • SHA1

    28ec4002535b462166a693fbe518f0713283441a

  • SHA256

    db42286edc586554953f04d7faf7912b73f666f55726a17ae74b363f7ea27149

  • SHA512

    ce5447e83785234c1aa68d652898c611b1c5d15b58875a4506cfa6e9ed92561c68ae1cdfff5e64abf9ed3bcfca0751b7b8eca950c2e7a1701827a1ad45b0265f

  • SSDEEP

    24576:tqj3iDmTT6LHgJY+YHmu8Uz4MXmBdGGqKlIgtrHgzwzYsOLHgs7d/Fisl3RuQ55x:YiDQuH2W/g5Hg8zYsOJPl39

  Score

  10^/10

  redline@cool_man717infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2