Extracted

• • Target

    bbb3ea0ee3fc865e9d6b34b208f689d041f542449a76472f5f03975384861a7a

  • Size

    1.5MB

  • MD5

    0a8a38817e7656b0610024fba4c6eb93

  • SHA1

    ce0de6d2c54cbb504f6f5bdddc44ec98cee76942

  • SHA256

    bbb3ea0ee3fc865e9d6b34b208f689d041f542449a76472f5f03975384861a7a

  • SHA512

    8ee3cef44dee08faab296764248097d8b934f886911947daae873f0e1682ef2b2da7326993af1f941d95c75be9373078d55fa1aa39e591cdf2f65050bc5a126f

  • SSDEEP

    24576:cCblaP7fhcZaMLhQZZ/ECOqrHcmMa3Eu:EfhcZatMJ6uaB

  Score

  10^/10

  redlinelabinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2