Extracted

• • Target

    file.exe

  • Size

    228KB

  • MD5

    a6840d9f847794e1df91a66d445d9252

  • SHA1

    9d5cdef85c7be297a429fd3291c56badfe4235ff

  • SHA256

    ec53e4d3b5b4ce83836f6ccdf486f1ed27feba5e00038c8dc302edf1653a0895

  • SHA512

    24ffdbadfecee3a5b25cbefcc18d380c9378e776035f9f6a7054f6df355e72d30407fb5c1e2ca2692c42e06e1e15846eb2351a04536121a87ea64ab7f5913905

  • SSDEEP

    6144:eRI+XjHms/kj24T8khkSrY3pbaLS/kmn70:eRHXjHD/kjrPKeLS/kc70

  Score

  10^/10

  redlineinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2