Extracted

• • Target

    1870acc9a07734fe68ee663e671422b41c31010b450a60cf93c643012bee12a4.exe

  • Size

    212KB

  • MD5

    a6dfbc0654909c203fa095a0c085791b

  • SHA1

    75be4fa2816a7de64e9b48b2f043b8395d42250f

  • SHA256

    1870acc9a07734fe68ee663e671422b41c31010b450a60cf93c643012bee12a4

  • SHA512

    5737df1b255513cddd3fde20aedbfc53aacb25e3b9fd0ad11e3460de8621b602649e6771e35501125ba688f6d34799bcfa41126b7a28e19910359645783bf986

  • SSDEEP

    1536:GfyxN9r3PWQF1Ree4OWyzY6I4HLSaIMNnapdr/DRbH5Tc+QRRk9pqXWLcOh6P3XW:AoN5+m1kenPT/LSaISnkRbRxaGbLQ3m

  Score

  10^/10

  redline@bloodyrain12discoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2