Extracted

• • Target

    013a487ee136477c46706f149fccc14409f7bc0a53060bbfec4fca1ea2b8133b.exe

  • Size

    252KB

  • MD5

    eecea8a0d8cf4bb72e7fe29909f78189

  • SHA1

    e34ce307cb0d9d4bb0e20109fad273efb3b75a21

  • SHA256

    013a487ee136477c46706f149fccc14409f7bc0a53060bbfec4fca1ea2b8133b

  • SHA512

    d458108a23f9ba8fef392fd7dfe3473c331df9066f7cc9fe383b06f27e84ec8cb0b5a2e8f1aeeaf2bfa17ccb8fdfeb5cee13c1c5a1e70519713c92c363967cc6

  • SSDEEP

    6144:jUmnhkRWlYBmweduFyFdG1B8fIu3P3HegxA4c:HnhkRWASZ3vHzxAv

  Score

  10^/10

  redlinelogsdiller cloud (tg: @logsdillabot)discoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2