Extracted

• • Target
    61329c023d67de85decf92ce55a3c196.exe
  • Size 2.5MB
  • SHA256 502fe5ef79bd707b4b31d35b6ac4df2ee14a59012080abe632aa51cd1908fd15
  • MD5 61329c023d67de85decf92ce55a3c196
  • SHA1 962c1796851c8b9d053860722bc866e567072ca4
  • SHA512 daaa8ac5b9e5fa0182faa6c4f75c1b88ae1b64660b9e4347605208bd99753887745180a411e40560d922a5847796b83a9ca81a8838f1784c1a507d7473548bff
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinegetreadyinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2