Extracted

• • Target

    73112b71da11771029b84791c5ff3440fe1634d78d5e8fa62d75f05f1a76dbc5

  • Size

    217KB

  • MD5

    6426198b2789f1d5974088367162a5da

  • SHA1

    2f39387f1821e7487cd3a946a3f592d7b98943a0

  • SHA256

    73112b71da11771029b84791c5ff3440fe1634d78d5e8fa62d75f05f1a76dbc5

  • SHA512

    f6d042b4c5772b257021b1b1bdd636867d3617b78e0c64f86fea83f1101fa14514348108a79f9b4360913b7c6027d2ef46449fa4758bf4b3b758f8e1ff66bf9c

  • SSDEEP

    3072:eA4v790Lox+J4ETyre2xRc0jqr76OlnA9DMpYU4KZe8JbJ3Yl6PR+cpY8jwVS:e7vZ0Loqwe2xrjq6O4MJ4bM5Y4+cE

  Score

  10^/10

  redline@madboyzainfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2