Extracted

• • Target

    be8289a102bbd49e9e63e3b1b332d6bc2455cc22d405c9a57e7c8af7eaa77ac2

  • Size

    282KB

  • MD5

    b98d773562dd834e2c53c3f5f71e335e

  • SHA1

    c90de73fa87e4c2ab070553193703be19f0aba23

  • SHA256

    be8289a102bbd49e9e63e3b1b332d6bc2455cc22d405c9a57e7c8af7eaa77ac2

  • SHA512

    134f34e1b2900d82e129d0f75899b41ed8eb69b014bb3ebf979386fd5f7da4cd891ef47361a14292247b6782fd7a52221f136b091fadb620fa2fc634e0ac6e13

  • SSDEEP

    6144:4QvoWvJuXZpxwvTygXUNVS4MGh1aBFrvz1xcxcWhirt:4UcJEyR1aBFrvz1xcxdirt

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1