Extracted

• • Target

    7db38668bfda0f4fd5885ff8965304f3651113777003e86715c08ba8624d9114.exe

  • Size

    1.0MB

  • MD5

    1aa7939721f123f428719c210b88df55

  • SHA1

    7f61007a5463e05d194ffe8668b797ddf5280d71

  • SHA256

    7db38668bfda0f4fd5885ff8965304f3651113777003e86715c08ba8624d9114

  • SHA512

    95654e50081acb40a323c8c447ae65ae7338ba12cdc0bab81ee77295316904db8f89f7f4e284f8f86e911cd9654a788cfb858881ee6e0c863f1e59c50366364c

  • SSDEEP

    6144:q1yNB0anZ8DhgCEmcxb7hAAOY6cgLsBd/ujSi1RURR:q1WB0anZ8D6xbtA6Asv/+SK0

  Score

  10^/10

  redlinelogslive2infostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2