Extracted

• • Target

    d28a2aab6347d1c9e9a6aa8be3a4a3bd6fb29264c967e5de2d71c9752e7fd645

  • Size

    261KB

  • MD5

    07e5db4b5cf0006415af6c23ee01d17c

  • SHA1

    bd22bbfac1031d708a27201b043c9a4177ae5e93

  • SHA256

    d28a2aab6347d1c9e9a6aa8be3a4a3bd6fb29264c967e5de2d71c9752e7fd645

  • SHA512

    434eb5fb13f5e53fb1eeb92d097819ace4016e6c0a5f32b6fdd132395b1ff5646dbcb5ec5e6978de6c187aea5d6d48c211954964fea4d8e3f979c1cf5d5d06c3

  • SSDEEP

    3072:5hg7H9f1x8OyRyHFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2yQHcj/:/gT9f1/FaQ7W05AEezbMPZFzAy2yA

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1