Extracted

• • Target

    k3868075.exe

  • Size

    376KB

  • MD5

    f696dd4c60d22911d30228bf29c25d62

  • SHA1

    460ba20052fc8fa72df5ad442e31a596a19386e4

  • SHA256

    acb3d688090c8652ea729da64c8cb77cf64e1e6f561e98aa97905af13b62b175

  • SHA512

    2147714c891c497693fb1c80eaace126f032255464f73451da8bb0e3934bb3bd5fda2ee3988afe6e144e11a31a6ee0b34dbedfcecbb5f64939601b666c3c0b9a

  • SSDEEP

    6144:qGoiKL/yfYb5B+BO99c0s0ZVtAOOgFyIO6hJOTfv1kXM8cZ3c7V51YrUMwvykguG:Lo//yfYb5BIQZVtosyIO6lF55nyuc9

  Score

  10^/10

  redlinetakoinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2