Extracted

• • Target

    364e1e1ec53644f83d25bc6457b64f5517c3ae19cf17cc725c91fd3faeba17ba.exe

  • Size

    648KB

  • MD5

    602a4ddfabfe7c1b5fa31290e5295a89

  • SHA1

    faf33c2b48f6f4f9f6937cbd63655bcd7072677a

  • SHA256

    364e1e1ec53644f83d25bc6457b64f5517c3ae19cf17cc725c91fd3faeba17ba

  • SHA512

    8a18dd7501e9a509558f858ac684dd5030aff62a073f6307de4d4d27c0a6b39d824f637c7305c648cab23ad68d54a6eb8b62d23e667c3f04c01641e22ca56ad1

  • SSDEEP

    6144:YgZCAQw89v2xG/o58ZsyW0YRpM8q94nhOc8mf4H444l:SAu8OWe8q9wOcr4H444l

  Score

  10^/10

  redlinefozinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2