Extracted

• • Target

    42a7f93250c5512797946e177cbaf44dfbed5d58

  • Size

    856KB

  • MD5

    beeb5de149b4c472848421bee7416093

  • SHA1

    42a7f93250c5512797946e177cbaf44dfbed5d58

  • SHA256

    084d376d323c8eb5d77a446295a94f236bb93945a4df6cdd5b96ba517584963e

  • SHA512

    22d165f268fca102ce2197e73d657f30d3e96eb5eaa3e7daf3cf6aeec4dbfeab9ed1be4a4a791fc386dcd8198dfb60c81aa6eb1a4679978ed1c738dc1b037153

  • SSDEEP

    3072:ivS07xLCZ3IhEq6OdmpBf65NvDaNN5CEddUHzNJNMsnSJ9NJCHwFwkNEqWX/ODsv:ivS09LCZ3IhE5egMrXd

  Score

  10^/10

  redlineinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2