Extracted

• • Target

    113ff51b73011d0f6adaed23165ba3a11a9ed995b0ad7b5f2fc4260edec1d64d

  • Size

    341KB

  • MD5

    87c188252e16f96839c2bd5c384872e6

  • SHA1

    c966e6d2bcb2c3f38e76fdc3814e53e724f7b314

  • SHA256

    113ff51b73011d0f6adaed23165ba3a11a9ed995b0ad7b5f2fc4260edec1d64d

  • SHA512

    c51a4ef6bf5a8d73e1e1bd7c25390b37446502f9068415e191dd5a2ee7d8ed8f76e209a2df787c4ca9d8ab2fa42e09621a5dc987b7fba52aae2344b9463e6716

  • SSDEEP

    6144:dagb5p4oZflvsjew3f+vW5FLUKMAOUH1ITdKoaH4rAYjIOleDML1RP9tTd:Lp4oZflvB0vM+c/aYrvjHRV1d

  Score

  10^/10

  redlineslovarik15btcinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1