Extracted

• • Target

    0f04e68d258b3edcf493d8453484c8e540a2b4747f1eb761f27f70d03cc7f810.exe

  • Size

    18.0MB

  • MD5

    0f13d26af0c24cabcacba9604bf6862f

  • SHA1

    a533607111d1c8fa8bbc79b95cf6289106b8f2d1

  • SHA256

    0f04e68d258b3edcf493d8453484c8e540a2b4747f1eb761f27f70d03cc7f810

  • SHA512

    f606bc65a6c4b60b16e04724b85d622bfbd59366274c22700dda6a2d357e9aac85bcdbcc30dc00cd1dbaf4c4b881bd404a4d8c0a84bbe96e106f7f529e423671

  • SSDEEP

    393216:0CxRC77E1SF2LumzVbugLjS19kZ+L1FVqXxjvyy:VxRj3um5bC1FVqhjvy

  Score

  10^/10

  redlinekodiland-wwinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2