Extracted

• • Target

    4d689288fda075e937a5bc00afd4b2fb077d5aef8ac767fb415f8b7df31fadd6exe_JC.exe

  • Size

    393KB

  • MD5

    0ce4735ef6b7d77652abd32d08087704

  • SHA1

    3fbc5fc64467dbb77e66f93ab7430f21482a2bf0

  • SHA256

    4d689288fda075e937a5bc00afd4b2fb077d5aef8ac767fb415f8b7df31fadd6

  • SHA512

    32b02ea3c38e4e8478bf264f401cc644ed58c5c6b050137173f75ef3a38c8a53ee56c2fe9e285cc8d644c8adccbe8d2a0a4d4173f40dd443380584222a0b1c65

  • SSDEEP

    6144:6tcaGEZt20ZSwbz8+Dxe8kVAONlZcnvdT2iCcVO4GzCh8Ey:6tFzZtT78Trjcn1Ph8Ey

  Score

  10^/10

  redline@black_santa21infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2