Extracted

• • Target

    file

  • Size

    488KB

  • MD5

    3269763d6d01c428b05c29c99d6e85a3

  • SHA1

    9a260a3f59fb527d8d602feca4fa38b4aa648150

  • SHA256

    da920bb04ee50d8842f01eda3e8eafde082331df010631fc8d0a2c20af911e98

  • SHA512

    cdf3fc6d56ee82306266b6a163d764090d05b1c0f588a5264653ae815c9aedd690b8449277abe0d30219640fee1fc6085f1b1c567220a708194b3ed956cc07d2

  • SSDEEP

    6144:QFa3jCmaCN8Ye6R3c7kf5OGZTAO70xhtQTUKlTG+jhQ3PdfLyrlr74cEpmmuYn5:asj3ajY/3cABGLQVgG4cEpmmue

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2