Extracted

• • Target

    ea63340c1c1914c476b780cf79e8189c9aa1b38ff6b406f66a3fc630799cb911

  • Size

    405KB

  • MD5

    ae2d696509b2d0c96f6f4d117928eac8

  • SHA1

    776a2e2ddbd800feeec5b36d1ee34192275e9a58

  • SHA256

    ea63340c1c1914c476b780cf79e8189c9aa1b38ff6b406f66a3fc630799cb911

  • SHA512

    1ded6b18879dcb131829918f92329a4db3558b8b8562aead361d56be8c70638df69aabb46cbffeea51b5ec2f8f8d93803a64d71e9df80c13a8af3f6c65029af4

  • SSDEEP

    6144:WbvJm09zORs+z/TMify9DAOboQwDIL4lfyuVhKoPdRkAL285:W7w09CK5NCnIEQujKE685

  Score

  10^/10

  redlinesmokiezinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1