Extracted

• • Target

    file.exe

  • Size

    294KB

  • MD5

    20175ac7196c1bd015cf5fa4e0303a31

  • SHA1

    4a6d6e00f12741d5defda0151309d77f6128edc3

  • SHA256

    e9cbe3213f2d0d3fbe2d69e387de540abb36946b92a6aaf62b9d8c3f702dd947

  • SHA512

    4717c60c30747ef1228b3e96111d1e71415ab1ad8bc181e365323978eeb0144f7bf9e23d485f5ba8d6acd62351af310f32cd2e61c1453691766ad3ca64dfbf62

  • SSDEEP

    6144:PE2SMtzoTI5zWLvgnyfH1r+xl4MnG29CQe7:PErMtl5zWDy1Q

  Score

  10^/10

  redline@madboyzainfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2