Extracted

• • Target

    1eb7c95d0c8c2139f8c990f3835490363b4e316af0e3d29d7ee9ab11e394c796

  • Size

    309KB

  • MD5

    98a447d6a1e8397bb03f55ab2b6eceb2

  • SHA1

    c4a6c06881369162c15cd8661e40c22900d96126

  • SHA256

    1eb7c95d0c8c2139f8c990f3835490363b4e316af0e3d29d7ee9ab11e394c796

  • SHA512

    d14f2882544d6c5ecf0c7365ffde9c1dcadbaff2676b003dcfb627536e9d3b77733363a591b9d20e493e8fda776bc41f33ad798398c7760dba054b75e752307f

  • SSDEEP

    6144:mD5k3As3xmy6FyVwvTygXUNVS4MGh1aBFrvz1xcxc7S0:mD2UyVyyR1aBFrvz1xcxL0

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1