Extracted

• • Target

    737a74e471b01c0c767e21fba266aaf00ad259f39e9cd16c92afb303e1c86e5a

  • Size

    309KB

  • MD5

    ee1fe3cf6052c894fb8445a92e1ce551

  • SHA1

    1ccd507b5a1b76783c685bcced618b58d89296ce

  • SHA256

    737a74e471b01c0c767e21fba266aaf00ad259f39e9cd16c92afb303e1c86e5a

  • SHA512

    8892ee73398d289362061354a50022b55f3d0c2c18cd1d693e0a1350f9353ea1930f56be4efafeaa62d4f0698636f45fa3f28d84daa548ac9e17dc4732cdd8a2

  • SSDEEP

    6144:yD5k3As3xmy6FT4SwvTygXUNVS4MGh1aBFrvz1xcxc7C0L:yD2UyM45yR1aBFrvz1xcxD0L

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1