Extracted

• • Target

    redline

  • Size

    631KB

  • MD5

    2345c226577de700a9158518531baf1d

  • SHA1

    7fbb1b7cfe5705c22b63b0867b4e9ea742c3d0b7

  • SHA256

    1479a6a608f751577c1b87438adeaf13211690dc1e8931715d5a3cab0572e316

  • SHA512

    539197f0808eb33fffe426aa718891cf4be05d23aab208b49b97b5ba03e31d1602c1febcb1a66961336b893bae48a384ec51f1c762803ca23456c0bf97e786a0

  • SSDEEP

    12288:Dd9VHRFi5j/7YsGp9Tk4nKZUGT4p5gTbARgDBL:5RLT2ypUcsBL

  Score

  10^/10

  gurcuredlineinfostealerstealer

  • Gurcu, WhiteSnake

    Gurcu is a malware stealer written in C#.

    stealergurcu

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Suspicious use of SetThreadContext

  behavioral1