Extracted

• • Target

    eabcffb9a7698b571099f190f8b33fde608543632506d3abaeafc8f99fa58678

  • Size

    309KB

  • MD5

    bf556ed396f430be17767f8199057baf

  • SHA1

    e81d4b60f0d078d96f1c7bd90decc83570e16947

  • SHA256

    eabcffb9a7698b571099f190f8b33fde608543632506d3abaeafc8f99fa58678

  • SHA512

    b29520f68902ba108262ceb54c42eff205f83d26346b5a0c5e4d41d3862b6a7293277fbf8b9fea3db0f11a00960d8b05eca705a22e024abf500f6d1e596af046

  • SSDEEP

    6144:oD5k3As3xWy6F6MDwvTygXUNVS4MGh1aBFrvz1xcxc7V0L:oD2kydMIyR1aBFrvz1xcxc0L

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1