Extracted

• • Target

    1744d4356987ffa1eb02e9f46f0cb2d1f3b9a8a3c916a42de9a60b1d025f2192

  • Size

    1.9MB

  • MD5

    475b2becb48f3a6b2e302a32dbf26b3a

  • SHA1

    bbce1d576d2680b7065220f786830a34e00cbcac

  • SHA256

    1744d4356987ffa1eb02e9f46f0cb2d1f3b9a8a3c916a42de9a60b1d025f2192

  • SHA512

    118443717e762f24ff5ba1c8132adcd8d446043833625e65ebaf51736fffe2586ffbacde88e5816e5f8076f387e6fefe08b078891f83dd957d608c3963736f52

  • SSDEEP

    49152:AfcrCkCQC7gihOgw0x5kB1WZdJmih4pEVjWzZ:2crCHQ0V4WZyih4pEVjWV

  Score

  10^/10

  redlinealpacainfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2