Extracted

• • Target

    file.exe

  • Size

    401KB

  • MD5

    a7743bd67e6581bfa51ce176ba844194

  • SHA1

    7816b37c9bd622826cc5f41190897776b8f2b479

  • SHA256

    67d787249ae186a7000e4db614af862c22db210fa263d2bdac3dcc7b06db8665

  • SHA512

    8321a7d7c2100250544fb624fc60469472d17f2e1f0d8fd30079ad5c90c38579a26451c2b8ef29eea66ba0683217bc02f57642cbd65cb72af87d980505a59bbc

  • SSDEEP

    6144:8gLO6OXFulbG4qXwVR7Gg2Bi2kAOJrAgRqYz05agz1bSczwKwXq:8N6O12bLqXwV5U+qpkgz1OczwKwq

  Score

  10^/10

  redlinebundle2infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2