Extracted

• • Target

    f67c7ecca41c373a184960bc28ce7ed3196c388daa6469c1be93f210e74f1348

  • Size

    261KB

  • MD5

    8ecc324b2d30cb9ec56cdb33bd6392f1

  • SHA1

    34e41815f186d62bbea422e1b9d1eb682e2e9848

  • SHA256

    f67c7ecca41c373a184960bc28ce7ed3196c388daa6469c1be93f210e74f1348

  • SHA512

    67ccf476e22c80925c734a258c0af22e80b21cc92029ad7e75327a8817e449e6f0ed8fb92ab5a5f5e7d02a60325f985c1234ba4e0f4b334363c7f7063d3f09d4

  • SSDEEP

    3072:6hg7+1E2R7dRyHFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2yQHcj/:+gi1yFaQ7W05AEezbMPZFzAy2yA

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1