Extracted

• • Target

    a0988d8e9007531e03fc38996f1890b17e4550e5c7de0bac1b1a62d162bcbe8d

  • Size

    261KB

  • MD5

    8407064e79f06dddb9a110a1e4809352

  • SHA1

    197e5753e304dd412059c965c56f209732119573

  • SHA256

    a0988d8e9007531e03fc38996f1890b17e4550e5c7de0bac1b1a62d162bcbe8d

  • SHA512

    125ee80423d715c39a4018b06273c8f9bd1e617781bcd73af9548f621012858b7dc461a8907df353971932bfdec78d6f5314441f3192199b1e9e472938fdc1e7

  • SSDEEP

    3072:fhg7wH1TrZRyHFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2yQHcj/:5g8H1GFaQ7W05AEezbMPZFzAy2yA

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1