Extracted

• • Target

    f96042e4fc92294214d5e5af42b093cd7ec7476db19baeb6d0c257c05623e19d

  • Size

    2.5MB

  • MD5

    2043d051a8aa5175259eeb6304df06be

  • SHA1

    0824f696eb377f8df25c2fa4b58476b2377d75e6

  • SHA256

    f96042e4fc92294214d5e5af42b093cd7ec7476db19baeb6d0c257c05623e19d

  • SHA512

    73271d294f2a0a5d4a9df675e15c5507fdf87b86589367a79c9af75ebad5751638cf92e03421d8e3b2b178c2aa10887a67e94cda1240d5c5dd3d0ed57ef62afb

  • SSDEEP

    24576:0JVAP8k048AYQYtWGcXitMSndI1HeuSsbGx6nf4i8ELcZnl3RuQ55313T:0rk8k04iW9fnf4i8EUl3x

  Score

  10^/10

  redlineinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2