Extracted

• • Target
    940fcb61134684d28efa774fecdd1c6ccd179e38c1e060ea04c8270ee18a16a0
  • Size 1.5MB
  • SHA256 940fcb61134684d28efa774fecdd1c6ccd179e38c1e060ea04c8270ee18a16a0
  • MD5 7aa2d4005c0688fbb8c3ff8f1ad2f898
  • SHA1 789b429372d9eec386382a1893efb56a52890d5d
  • SHA512 4dd6ce4903a33ab1a8fc4a2a8e3467833b1ad60573e0ce0da250526c96f06180b52b4147e1f155c8833c082f49af04e25fff7e1f6bdea73f24ea6a118ae6e18f
  • SSDEEP 12288:4ruH7lpvsJws5ZcmuLVc9X6a9Dhvh/nIUvmlG9bj:4rGldsJwh46a9DhvhAUvU4
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (tg: @logsdillabot)infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2