Extracted

• • Target

    f19ed6b7a2f686c7c1e9d909b1762906b8af6832d884c71543ca3394f88f0d17

  • Size

    2.4MB

  • MD5

    eec53964a1f5e40100a8926509c1a715

  • SHA1

    404b689b4372b9496fb5f8ee73b53702b98daa07

  • SHA256

    f19ed6b7a2f686c7c1e9d909b1762906b8af6832d884c71543ca3394f88f0d17

  • SHA512

    86d1eefb1d4db95269822d2ab87075538842988f2ee9eac1d9c1c1d12abaf17a7102b7860d322bc247581db84ec3ef840ede11103c6144bf1a44a74d00562fef

  • SSDEEP

    24576:BooVgDYcYeFbbY8MueloOvSD7LNoRWQp9OZYhyzpfLWRMLFSeuRzgyNayzFl3RuZ:5VGr7Ro8zpfLWRMbuFl3U

  Score

  10^/10

  redline@xgatewayinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2