Extracted

• • Target

    file.exe

  • Size

    1.5MB

  • MD5

    1c5be8d8ed67a9e426060b3d59f5ed43

  • SHA1

    445fa30175f17ec751b4b004dc98daabe9f03929

  • SHA256

    43af5bce1d2f2521c8eeb8133e0fa90e4ee9241e6d5cc8b8e6560052037f5427

  • SHA512

    37d8048eeafa8e3890be3da52fe424e9e33359cccfe5f287051d9e027f8887162ec4d47a42ee40727cf34b2cc20cc2cd6c18dedac43fbb0eab956f33535a2c18

  • SSDEEP

    24576:V71YR9epuTBP8xpDxExzGNMWX7LCebM3oaJOFkTzhl2E2MrzBDRI:k9epeNqp1EFbWrLCrDlvf2Mr5RI

  Score

  10^/10

  redline1310infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2