Extracted

• • Target

    file.exe

  • Size

    246KB

  • MD5

    90c5b6a8ea281b28fc2ce880f09ea9c0

  • SHA1

    cab413b6c77b64eaf71b9fad566cc1be4606794f

  • SHA256

    7772483da80c14d62008b1f08517d7a61dbf477b895e7cb7c54edaf98b77a862

  • SHA512

    ebf3f1cdc1ea9bce41544a4e8cfbce5f55adb09a8de8ab7fdbb3140efc542ef02063b2a639e793506cb9e8abee72a41ae6b3e32ce1d45e326780f558f85dac79

  • SSDEEP

    6144:WEYDno2cLf6fQ0TIyBC0aShivMHLkWifML1:WEYDnkKIj07hdL91

  Score

  10^/10

  redlinegoogle2infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2