Extracted

• • Target

    Setup.exe

  • Size

    8.3MB

  • MD5

    14438b7dc15aa98f7a7a25c2760659f7

  • SHA1

    a68e6672b7054c63fe17315e363aa293819204b5

  • SHA256

    e5d927bb8fb10465da3c5c732d10ef2afeac0345314564e20f9b03a4afcf8331

  • SHA512

    c014d516984f9ef6a9f4cdb079c56a5a37cad78dfbd614702c8a2dd24242cfdf44edc4ae86204aee35095fc849bc1f0eeaf842259c74f01e79388ff3ffb32876

  • SSDEEP

    196608:ceScO2cHLW+K3Hc0GlDMkOOCMTCBC44NM6mqiwImHw:ceSWMWX3+Dfc1F6zZit3

  Score

  10^/10

  redlineinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2