Extracted

• • Target

    pureland.exe

  • Size

    700.6MB

  • MD5

    68640753e6d7039bc457b03a5b57fd39

  • SHA1

    cfb3951c0d484c3e52054104979e7c024b178f87

  • SHA256

    7ce78fb87ca8d2691f753907b64147f0de94b236b0e0fbaccf40f2ecbe15cb23

  • SHA512

    1e5cdfe988b92cf90ac2f7aa1449dd830377023522feb3e2129bda2a73c2ac588408e24ade5a5301bc26b68bd20bdecaae5927fd097e12d686e2809d1d94158e

  • SSDEEP

    12288:F6P7l6yr6BCInd92qFfZ0ElbvCJSPypmECG0H6aXYGkA:wIyr8CHElbvCJS6pmECGzaXYGV

  Score

  10^/10

  redline5hrinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2