Extracted

• • Target

    3a3538c69497117eed0c401d2885cc81f48caac0074846296251696ecc7c39a7

  • Size

    2.5MB

  • MD5

    37d57f7ed22713bb64c248e865beab23

  • SHA1

    bb6a150d5b5353e7d785b9e3f15ddb1d60db0612

  • SHA256

    3a3538c69497117eed0c401d2885cc81f48caac0074846296251696ecc7c39a7

  • SHA512

    e9dbfe5de8b046489771f2dafad54ac0591aa5c69ad68c5450e6f5519a8cf396a44f096ae85ffa05ae1af272c8eb1ed2a4b7d1c98ba2dde565f3d56d49cb6c4f

  • SSDEEP

    49152:Duz9O+na8s0uEaPZRpcmsVsCNMSh/y/RVpRnQXz2:DuhOMsGaPZRNesCNZ6/RfRQXz2

  Score

  10^/10

  redline1310infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2