Extracted

• • Target

    641097c9db3c8d3fe893aa59c9abcc6f0a3f8a8e06b2693d16f39fae1b716d19

  • Size

    282KB

  • MD5

    faaa46c2c71fe035c02c984175f16495

  • SHA1

    7770b6c6af94a2e0559c6b3caa283f25875c4941

  • SHA256

    641097c9db3c8d3fe893aa59c9abcc6f0a3f8a8e06b2693d16f39fae1b716d19

  • SHA512

    b362d6c3faea185032ccb6a410b3068cec90ff2db82bd046c022109e38352202bdd7e11df00004a7e0a500776acffcd8768322b87b029728736b3c54b3dd82b8

  • SSDEEP

    6144:PQvoWvJNmptwvTygXUNVS4MGh1aBFrvz1xcxcWhMrt:PUSQyR1aBFrvz1xcxdMrt

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1