Extracted

• • Target

    2e5a7f609ec10a701bcb4f4b91fc21dd0390cc66528c2a5a75032dc03aff479e

  • Size

    301KB

  • MD5

    4ea49c593227325671e061daaa5065d2

  • SHA1

    09e5776b15b99445575fee3f74813ca72c8348d7

  • SHA256

    2e5a7f609ec10a701bcb4f4b91fc21dd0390cc66528c2a5a75032dc03aff479e

  • SHA512

    50816c6700a4e00b81ba87ed4d118b353582cea2f770f4570b02cd96f4938fa836a7dfc2c955ab0e4a5051e2efaa5b70b7ad6d7b8fb4899beb32635257183e56

  • SSDEEP

    6144:E40PJndJ7eCz4p4p4Zr4M/J6XA8cBvF8r9yAA:UndJeCziiG4MBGA80FK

  Score

  10^/10

  redlineinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2