Extracted

• • Target

    data64_4.exe

  • Size

    233KB

  • MD5

    e833d0f7cf21d8b27f6228e08f5e86bb

  • SHA1

    a595f105f4ab9c3b52b3f17cb5e604ad5fe7f700

  • SHA256

    12955cdf8df591e72cb1fa807c0c09bf5ce77132c040470f9e8ca8418fa4add6

  • SHA512

    505ef844acaf72f601855a9a51140c32ae6165a178994e0662b499203b8e2973d545edb35ee1eed8ab2c7071384b1a451f5eebd157178e1b03ca2c38560aa898

  • SSDEEP

    3072:gZZWYTABjzcqJSMkMLeBHCHzmrPGr1eNv7Y2UWi167opA+:gjUBjzRStwzmT4CENWi16iD

  Score

  10^/10

  redlinelyla5.09.10infostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2