Extracted

• • Target

    2168c750c35dd27f23b547b1b596e48bca0a311d2c50945e5bb9ace5791b65c9

  • Size

    282KB

  • MD5

    2ba774a4338782f1a0665e795524c665

  • SHA1

    b88391a82002ed0ced450890af187493c4015a68

  • SHA256

    2168c750c35dd27f23b547b1b596e48bca0a311d2c50945e5bb9ace5791b65c9

  • SHA512

    47934d8fd0b710f73b87bc576600ba38c60f72e02c4376d7338ac85efc007094109a8c46de9e3d5d0957f3d118a7c2ccf26d839c4eaa07a0c1ae192635b771b1

  • SSDEEP

    6144:QQvoWvJ1KmOwvTygXUNVS4MGh1aBFrvz1xcxcWhvrt:QUewyR1aBFrvz1xcxdvrt

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1