Extracted

• • Target

    file.exe

  • Size

    1.5MB

  • MD5

    22a52fd6cde6f16f8d8a533cab615d69

  • SHA1

    8d650de9ebd4b0d77ef09c271a9e5483874bba30

  • SHA256

    e22cd3a8e74e1e54cdcb25232b5d7c77c8581df0df866725be0cbddfa48404de

  • SHA512

    3bea0d75d1c1da0a47dbe8c7051a4065138eae195926d543119b4e8a70c1f11acc2aa93a03bd46bb7c0a506af0e7b7ecb5eea762734cb9778e1870df4849938c

  • SSDEEP

    6144:2n9R71FvLHFla0OR/AOOp/QP/ojxzPPkq7n+UG39P:2n9R71FO8W59P

  Score

  10^/10

  redline@ahshar12345infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2