Extracted

• • Target

    123.exe

  • Size

    704.3MB

  • MD5

    8584416cd8d5c7095bd38831d775ae4b

  • SHA1

    6bfa29983d6d5f345156a435ac52df25d2335b5c

  • SHA256

    f5854b5b708d95d228d7c67643b4693d633f03515a5bcbcb69c995aac3bbe224

  • SHA512

    4c4f04a5423b39d2d53aa6e6c513e45d71e73d7fee2d7ac388a02e198e1259e581d8177882dee26cc884b95e8eaa81776724470200772c4fd4d16d1fc3058fe8

  • SSDEEP

    98304:mdDHuBJUPXfOZtVyqMLyut+vVxKaDOpZlehjfOeEhiG:+DHuBqvfQtAqMNyxpOIh4hiG

  Score

  10^/10

  redline@gramms_cc 14/06infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2