Extracted

• • Target

    file.exe

  • Size

    1.3MB

  • MD5

    9323ae8ed9eb81bf7b67dc8df117331e

  • SHA1

    fe165d929a559a437f3e99588f17ee5c6568e603

  • SHA256

    2e753221ff38b8dbebf919dcc0517ac22a1f4c99269fbf1cf7495278981abac8

  • SHA512

    38408b777be47a135680721be3ba0e112151728be5f5abf7ce9d3c152f4b756261cd761de7d63e817f9aae0591153cb196cbc15753e3926a68de7f95d53adda6

  • SSDEEP

    24576:OGX0h8b7WuGLpGLMMMHMMMvMMZMMMKzbKXOMMHMMMvMMZMMMKzbKXT7GLMMMHMM/:IuWHMMHMMMvMMZMMMFOMMHMMMvMMZMMm

  Score

  10^/10

  redlinenam6.3infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2