Extracted

• • Target

    cd2436f1cec484076be83744b0d4e87f.bin

  • Size

    2.4MB

  • MD5

    cd2436f1cec484076be83744b0d4e87f

  • SHA1

    425319f0e8add17e8f430087ba590190dfbf5250

  • SHA256

    5be845902145831466d3b710541d2c5a53cfc50108126c8802b48226e89e1887

  • SHA512

    b465013ef79f6d16dae386c5b05995b3e95167bfdc49363b93679f33e5c46686edf30ce921c6e60aa62526e2c36bf7f529f217a18c496002e028d90306fd9ab1

  • SSDEEP

    24576:pE+5OCYAY49zG/F2Mgeo6erV6X16+vHJrQdPFc3w5TTGgLNMuKbl3RuQ55313b:pN59R8vHJitc3w5TTGgpCl3N

  Score

  10^/10

  redline@forceddd_lztinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2