Extracted

• • Target

    Tool.zip

  • Size

    52.0MB

  • MD5

    7cedd43892780c0a717738c28b0033d9

  • SHA1

    8a9f801abb6d16bc60406c13ffc11f98ba54e367

  • SHA256

    f6570c9d8216762973f6858e03fa7c19292fbe6429ed76220e0639344fb58e7b

  • SHA512

    b4fe46794572ec33db150f4a4e3c5a21edacaeaee17c6a053ff5384221dcfcde87c9a8bd8c0412bdbea1f4ff2614cfb05cf9e67859d60fc3fe51d14111d66dd1

  • SSDEEP

    786432:ZT69PiQJVg2Sqpq+dU+x8GRFo8d2Ye4iPj3j8Sw7G2gE+jWONh1CriDc0pRP0Zlh:ZTsEqcMTBd1uc7pgEyNKF+h0ZCmt

  Score

  10^/10

  redlinenewprivatestubdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2