Extracted

• • Target

    ea24a2e9bec5bcfefd488a6c94adf1a1.exe

  • Size

    302KB

  • MD5

    ea24a2e9bec5bcfefd488a6c94adf1a1

  • SHA1

    d35b083a57b4c19ce9bdaf0dac04d2cad65fb1a6

  • SHA256

    313aca03267e906ae7bfe3c301531ce52eb14de8e9d6795bf59333131c9fec6b

  • SHA512

    041f876cf2cf3252019ae4b25c6ef3e7ee24f57485448c76b967d7e91d4ce3c922738a91a8a657be668b05d985b41d12d727679cc93678824a28d54536ad58b6

  • SSDEEP

    6144:fZ3MO7aCyBB2e09D5sUtm96WZd+EntlX:fZ3t7aSDep6edLntlX

  Score

  10^/10

  redline1infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2