Extracted

• • Target
    fb5312e418e0590527d601bf5099e185bd3d5dc31bb8dd9f72dead207f7a7008
  • Size 4.4MB
  • SHA256 fb5312e418e0590527d601bf5099e185bd3d5dc31bb8dd9f72dead207f7a7008
  • MD5 6f7476fdc8edc93c56f3ee86c8212165
  • SHA1 61c5f6bdc5c91ea4491091c27fcaf37a310fd947
  • SHA512 977e70f0eed4640029c2e9e81f01e86f598bf51803a96d7fca8881749ebcaa61170dd8196ddc4b84e175602e1ff0b0f8a3646dea323cb6f7c3ae710c2111f3d3
  • SSDEEP 98304:ObICdg/NcOFxBdBSa2/9joVkopxEBlexkecf:Sdg/NfBdga2/+V/pIlexnc
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (tg: @logsdillabot)infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2