Extracted

• • Target

    file

  • Size

    1.9MB

  • MD5

    74d00d97c125a4b2c7b6affedcb0d5ea

  • SHA1

    264768bbce5f67283a8d8dde0edddda345cc2136

  • SHA256

    f028eb7c28f4ad3126755a211a47f206812b182adb4ddb45c225802af1a27eab

  • SHA512

    082b42016bf199af19c4244a313c172e96e6614d0326cf302b9b304418342acb9c26efffbbfdff8d5b8a538c046be3a6e2d324cbc4c460d97891733ee367ca00

  • SSDEEP

    24576:rmiZG6vS2CIP7tZJWDBtXGTabfdjSsAG2:zvS2CIP7DJU2ORS7

  Score

  10^/10

  redline1006infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2