Extracted

• • Target

    b67148279cb0eccef45564104edd28528895706d8f15f.exe

  • Size

    276KB

  • MD5

    972f7adfdb8698188f4823ab492a57fa

  • SHA1

    5c2b3d50742dddbffbb1c568104805beb9001d65

  • SHA256

    b67148279cb0eccef45564104edd28528895706d8f15fc9a806387f5bcc8752f

  • SHA512

    2da2e73cab249853078d7d35a24806b1c15112ad976329ca3fe7bf16c84ad6614070e7163b6a614193cb91924463a2eadd4a8f98544048b6b2229b4a4b8bed3a

  • SSDEEP

    6144:ExoZEhkyxrgb6rV4Vnsc5xxNMMbVaT5hYovGINYO:vZEj06rV3cXcT5hHR

  Score

  10^/10

  redline1infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2