Extracted

• • Target

    file.exe

  • Size

    1.4MB

  • MD5

    34fe5a37c7921bbdaacbd9d6390e5eb9

  • SHA1

    69f9c57638e112232d315ef4d85af55151e9be90

  • SHA256

    fb510aeb78ac861e75a3d79ee2926d44121eaac29bdfac8878f2cd3cd4c2553a

  • SHA512

    a04662319b0385c6b59d4b6011e7e0b6effa73e978026d9d4a9744eae88a3f1d9019fae1a04427b01a134fc24e10947d86ecd9da2506bcb66ee18e4de83e34bd

  • SSDEEP

    24576:D71Y1FecMTBP8fVsJzoqmT56nYNk9A0IPkpo6tNOPQBI2WI0aCw28BueGl3ejZvT:mFecANeVsoD5WYO9A7k66tNYQa26aCeV

  Score

  10^/10

  redline1310infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2