Extracted

• • Target

    11B0557B857DE763E2A1A67B5CF33A7D.exe

  • Size

    469KB

  • MD5

    11b0557b857de763e2a1a67b5cf33a7d

  • SHA1

    6d033484de053b5d1788568efd364ef8c92d0985

  • SHA256

    ca0eb0fc3b97aca8601de95ca56fd06f565a63f7fabc508bf7f9deac8d58ef18

  • SHA512

    035cfd23ead127bace8c7b89b9e99f7dec0a1916015f7e63e7f6d48b2b951ca78c25673b21af735bafc6f78f483f8661666a67135c54b075d0ec91f55322b37c

  • SSDEEP

    6144:Tepyy7cR+ZjD7fAOlRjx3ruLR4Cf75uL8Mzci:Tepr7KEfbpx3ru14Cf78ci

  Score

  10^/10

  redline2131228623infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of SetThreadContext

  behavioral1behavioral2