Extracted

• • Target

    BlenderSetup-3.5.0-win-x64.exe

  • Size

    637.6MB

  • MD5

    443cc79e21eea02b0731b09aa0c58987

  • SHA1

    976078d978f3dc0e5b8476923531aecf3485c078

  • SHA256

    9f00eac23eaa3f569d4320235c814c1abc3a80997acbb537bed2fdb5ffba08e8

  • SHA512

    2d6aa8e8cc46e1fe51c89eb919f5973459e4a0f1b1cf3cdbf5701e2057fd5d8533325e65efde8f2b263df2f7cf414b27680b5c13aa68919ff2e889ba4d3ec714

  • SSDEEP

    1572864:Hcljj7Hs6Hjo0pQI/ALJXuHo9YDvA2zA10srNqr+en3R5yUJsU:H8jjbs6Hj9X/ALJoo9oA21mNi33TL

  Score

  10^/10

  redlineinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2