Extracted

• • Target

    HGTYHUOPKMNHB.exe

  • Size

    49KB

  • MD5

    0df61633eb3931ebe83f3c67f4ff843c

  • SHA1

    22ef104755afd6a5d9d2ffd36429cf5566195f84

  • SHA256

    bb997cbc8329ac47a1fb390fdda3c2c552446cdaf48193cd3a7eaa37df3f8a31

  • SHA512

    74cc3ff55ed74a7430bf14c20b06fbf7e7b4c1d899eb1397b66e7f37e8369e831ffeff101acfba9f06ed34039ea8460c1b5e02be6d9a92554d7515eb9de0d8ff

  • SSDEEP

    768:rPVNtIziV7zKCeB2g2DjF7FFobq1beLI4ZcYViJS6UZWUeniOKiRPPrk+FP:rPVIziVaKnobobeLI4z+S6UZWNFKixPd

  Score

  10^/10

  redlinedoccinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2