Extracted

• • Target

    d85fabc3417f089606ed10674c7472ac992b6588032868d83cb248f812739cca

  • Size

    261KB

  • MD5

    510eb8019df4a9360e12f54d3f2b1b50

  • SHA1

    e9dedc8ecc066fe4afcdb1ce11675dbf75298c5c

  • SHA256

    d85fabc3417f089606ed10674c7472ac992b6588032868d83cb248f812739cca

  • SHA512

    cb0a3074b6a24fb23618575ca4779dbb2ceac702365327a9c75625251630e721cbc061150f861f1c1e3040dfe9df37785bbc56ff370f41c0f6c32c19ba5fd5e7

  • SSDEEP

    3072:yhg741juiRyHFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2yQHcj/:2gE1GFaQ7W05AEezbMPZFzAy2yA

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1