Extracted

• • Target

    o3cr.exe

  • Size

    270KB

  • MD5

    403e23c4a6a129c58dcaaaeecc51a7a1

  • SHA1

    b1b7bbf8f6a095c33422ba157a46f6c11753583d

  • SHA256

    0402a4780ff6a5ad2579286301ff602457c242e8ddd90d90bce3eaee8b8f3e92

  • SHA512

    6e4d9ce1d3d627e7c6cb056cf5f9dd805b4924708579a4902fd1c07583651f74ef1b0c3db2da1104a4bb094acbfdc52b5f38d294b31012b3cb1ff9c50aafc4cb

  • SSDEEP

    6144:vVsktNQEngBxHA+fg3v9kKXUQtZK9KkWG/j:vVsEmEgHH23vRUQtgSG/j

  Score

  10^/10

  redlineo3infostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2