Extracted

• • Target

    30a53d3cc54db5d983851cd8193348d5fe7864c08d5eca69c54f0e4a398c35f0

  • Size

    355KB

  • MD5

    b0a7c6cf66737a958cc53732ec32fab7

  • SHA1

    2d36119c91a4cb2df0d348fe71b4e7cb70ae3437

  • SHA256

    30a53d3cc54db5d983851cd8193348d5fe7864c08d5eca69c54f0e4a398c35f0

  • SHA512

    db018ba48979d139bfc2df45c416ba6767a98b79dcff6ab62ef08c16445fd2cf3de61c54933212e3d3264448c7107071f98ec2203e9938c19c10c873805c4fd9

  • SSDEEP

    6144:vBhDgwkziVcc8Xq6UQQn/Qw5ryYlMbsTnMj3gcry6/n/kcu60:vBhDgXziVlAq6cumnMccrhn/bu9

  Score

  10^/10

  redlineinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1