Extracted

• • Target

    28f1280949ef97bce89613462bf5ebb3edd429cad46ebc1af6db9f3157cb787c

  • Size

    261KB

  • MD5

    303dc798316f7c2d2d7a4dfc50311f2c

  • SHA1

    46735a3be51b8145119edd4c65ab57cb99080d58

  • SHA256

    28f1280949ef97bce89613462bf5ebb3edd429cad46ebc1af6db9f3157cb787c

  • SHA512

    9cf803eed1d315ed5f75c93df7159103b727ce42d72a9587c9aa5bd3cc738b5fe8cb0a8ecbf0349d7a478e827aaaa6a24012f647ff656ffce53fee0d85df1234

  • SSDEEP

    3072:2hg7Fd1x+JRyHFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2yQHcj/:ygZd11FaQ7W05AEezbMPZFzAy2yA

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1