Extracted

• • Target

    08324699.exe

  • Size

    282KB

  • MD5

    99c0cd96d46794e20fa539b20e4cff64

  • SHA1

    97e5aa8366cac78fbd329dcc11d9ca8a6c55415e

  • SHA256

    b35a9c4ab45487ac9ba5b5717d975d76679a93a76c81fdd8e18841f16d2266f0

  • SHA512

    e2a5299832266f8ca5a2484fdbc2d0ab06c8587734bfecb2d55e9e768bf25f241b4fee028c3ab30912dc39219eefa2bab34aeb45e4d55ee56f91e3ebe16faa3b

  • SSDEEP

    6144:krcV9LR1LM8FaGwVIF52EskSvtpF/mZpgx:5V9jLM8QGwVIn2EskSFjMyx

  Score

  10^/10

  redlineeasycryptinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2