Extracted

• • Target

    file.exe

  • Size

    1.2MB

  • MD5

    5a21c827846f6b65822ee160ef78a7d2

  • SHA1

    adbc123ed0dc041aa59ddd453d33a65c359852b1

  • SHA256

    ae51ea26d95791314f8c8d951cd30e652382c4412a38d51bcbc599e1258d8d41

  • SHA512

    69e5f8a88ba384ce3e44626d2d70186e2decd100bd165cc5c476c549927c517c8f44aa360b668b6947b48ca9e2f4799aebc6822e6df1d61d42bca1a1f27594ba

  • SSDEEP

    6144:3PW4G7RKIR+td7M88qakp5SAOG+8KFD/M0F5oWGNJdRJoqDDp:3+4G7RKS+tVSh5Fg0FyNBJo6p

  Score

  10^/10

  redlineinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2