Extracted

• • Target

    file.exe

  • Size

    2.6MB

  • MD5

    be23e0f37b00600dc13e5027b181ecc0

  • SHA1

    6dd394376db7b536e5f546802e534b84b3b1fe70

  • SHA256

    36ff589a4d9079a4e103c8f6fbc0b5db93d521d0283f4d85eb8464e0a9cc0cc2

  • SHA512

    065e0d81731138dffe925d58af703e6ff90fe04c1922e66cd5835c32e97e25b794d9f2ea518138404e47f00a3b2ceda5e3550bbfae6a7975a36f3d0fecf90f45

  • SSDEEP

    24576:chyZxbMZfJ71qlWsxp4cpYOYVqAk/bdM2rAyx+dolv6ZGPVPAGLY/r6TBCNAoWSH:gyZtscp4afPVPqrAcAoWSkS1ll3D

  Score

  10^/10

  redline1310infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2