Extracted

• • Target

    bda9121d23eb12a438387cb5d08279fe63c4895836fe01600007b06239a7b19b

  • Size

    262KB

  • MD5

    1ae2d63509750380130d21bd036d9dd0

  • SHA1

    941edd6f8cf9a858e4b2cbb5c1d612fbcd800aaa

  • SHA256

    bda9121d23eb12a438387cb5d08279fe63c4895836fe01600007b06239a7b19b

  • SHA512

    b38c559752bb6a08de78de74a1506c1dbf2900b2b53cb3b1630ada0157d50092e5b43265a39f1cd487a8f78f835381cb9cb581e8c3de2730056ae7bb5712fb0e

  • SSDEEP

    3072:3x/Q1dYeyVyXFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2SUHcj/:h/Q1CAFaQ7W05AEezbMPZFzAy2Sc

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1