Extracted

• • Target

    00d8a59d88d38da9e84ed601706d63eb173c56d3bbc97b8ff637339eb1b5d4c8

  • Size

    258KB

  • MD5

    b9071138b64a56ccd4eb35067b31b9c6

  • SHA1

    8be418ade42ab80a5a937e26369ee01409ef2c78

  • SHA256

    00d8a59d88d38da9e84ed601706d63eb173c56d3bbc97b8ff637339eb1b5d4c8

  • SHA512

    cb0813ffaf9f0a2e121754bb1698a509e353621e48fc385def83ff152a84a5efaaa6c316077877e96c49cb582660c9f1c4beef29e0c564dd363fa51cd4833602

  • SSDEEP

    3072:mRH8hj47OqtyC3Iv+7MRd/QlH0lzgi4ALBmgyz1sQmRrwvPqCY1a5p:mRHnKvW7CQyR4oHyxsRrwXHF7

  Score

  10^/10

  redlineinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2