Extracted

• • Target

    autorun.exe

  • Size

    1.0MB

  • MD5

    4e3304bd81a45a4a02d298dc508194c0

  • SHA1

    b09d6899f03e48da77fee9e905741793064e116e

  • SHA256

    613f058b34419fa46aaf71c61ec0afe963c133e023b6f75d889fb67395ddaf1b

  • SHA512

    eecf0d026900af4157ec4f53428dd9af54ee29ca10187d08e9227f64265d6ac4c86a85bcb54bdc4f301d9ee8d842711db36653225c30a188073ed655ad44a901

  • SSDEEP

    24576:YM573oyJAzoy99wIqjQfgia8gzhkxsWSPjmJRGYPVs:YM573oyy99wICQB22x/m

  Score

  10^/10

  redlineunique285infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2