Extracted

• • Target

    025ab0f49ee3d39d7e323a0b0f9f33f4.exe

  • Size

    282KB

  • MD5

    025ab0f49ee3d39d7e323a0b0f9f33f4

  • SHA1

    ac2138e224a25432fbc8c781285a28781cf987fb

  • SHA256

    9e1ad9c58bb93d23920a109f81e15acd7ef54e5b7e0effc9338493880712148e

  • SHA512

    54cdd7d564998254827bb4bb653cd8f45ae3499a5681ac5c12e4a67766166accdf842e3237083a1695f49f2e73f9ea88f8545a1264df3e67977223f4ccd427ea

  • SSDEEP

    6144:LQvoWvJaFUqwvTygXUNVS4MGh1aBFrvz1xcxcWhFrtl:LU4IyR1aBFrvz1xcxdFrtl

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2