Extracted

• • Target

    b4f5dcd4edef2f6397d32e8746f34cbfa5e04be7f33756964941d1263dd15dec

  • Size

    414KB

  • MD5

    3489440ffe99777828d64e8e26745435

  • SHA1

    56ca2943bdb4ee82226d117ce665f94b00b05324

  • SHA256

    b4f5dcd4edef2f6397d32e8746f34cbfa5e04be7f33756964941d1263dd15dec

  • SHA512

    17d0a50520fa8863f387a65fef2aa6903bdb614f815ae12e87bf16db59e667a89d9dc0244fd0db9be5be77f9381752d4465041b15739a86908566544ffc6f3fe

  • SSDEEP

    6144:yD5gUwlREXKMmn/P3dAO1Xw2LX8lD/W/wBKxoUhGOuCIVtj9:wgUKRE6TdzkD/W/wBKeOuCIPj9

  Score

  10^/10

  redlinetaigainfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Suspicious use of SetThreadContext

  behavioral1