Extracted

• • Target

    2a071fd7e5c6344f0d9dcdff4f8b0aa8a23e46795df6359260ecf6b1ed6d832a

  • Size

    282KB

  • MD5

    29a1ffa46dd13725a0307d5ae8127033

  • SHA1

    f5d91ae67f86aaba34629095078e043e108d6898

  • SHA256

    2a071fd7e5c6344f0d9dcdff4f8b0aa8a23e46795df6359260ecf6b1ed6d832a

  • SHA512

    74032f6e0d8b4c3d856165c05239c353178db9c5ce33b13feceb4ea02c9b286b54c4476a37238f861314eef56c9fb7a2b37854ab861e8612052d947b9eb97f33

  • SSDEEP

    6144:rQvoWvJfoZuwvTygXUNVS4MGh1aBFrvz1xcxcWh9rt:rUO/yR1aBFrvz1xcxd9rt

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1