Extracted

• • Target

    file.exe

  • Size

    2.5MB

  • MD5

    eb50234bc1fbb4eee1dac90a6f8ffa6d

  • SHA1

    63ba284754ccb5436266f8da24b4a5fe7b0a3b6e

  • SHA256

    ccf169aa46eded35dfb01e44ef5ca87ae7a505af98be5e121f20077b835e24f1

  • SHA512

    01bf4dffb1af373cae2d14816f2d8a30394bd07d34ce70f533e1c287f909dbde412b16e3c439858393a95f39c331b6b8bb6b4396deda1bc6230251ea519781d8

  • SSDEEP

    49152:E574SxQLtuqQLeh78zXqUWPRdpoG8lDQlUTW:EN4+EuqQLehIzXgGVlsl5

  Score

  10^/10

  redline1310infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2