Extracted

• • Target

    5f125e2680addf662e8f9eca01993335ecc905e1a5d46d941cf7f02ac18f3b08

  • Size

    261KB

  • MD5

    044efe5db9a6b14b7595945229f02f79

  • SHA1

    5598fe9a275ce4703a16896987438e75485c3087

  • SHA256

    5f125e2680addf662e8f9eca01993335ecc905e1a5d46d941cf7f02ac18f3b08

  • SHA512

    c074d550e5dcaaba0abbde765855dfa67890c1ada2e5b2a0c324bd4514d54c9a7ccd84dfc1543dbe44e488cc6932e480ceb1cc18a1d16fedfc9ffa420321145a

  • SSDEEP

    3072:vhg7SH13OARyHFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2yQHcj/:pgWH1QFaQ7W05AEezbMPZFzAy2yA

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1