Extracted

• • Target

    9871bad0fe503c40a0eab3cf108ac0a92b390af6ff5022a1760d388719642672.exe

  • Size

    399KB

  • MD5

    fab1aa4abe3f6eedaf46f4840eae7568

  • SHA1

    aed72464992d8e8c2f84477c47cd84e40d45ae23

  • SHA256

    9871bad0fe503c40a0eab3cf108ac0a92b390af6ff5022a1760d388719642672

  • SHA512

    5d3c58b83986ebd102996b632bb970c3ac4f5224f1898f447afc59f1197d660591f1cb366ad5c3823ba1f7d41cb87da21385e33529733e3d42fbb39a5f30ee04

  • SSDEEP

    6144:upxjES2jicP5iOo2T8VrSd/sUAOMclt0KzaNxEXkbReevzYQlqLBe1Sa:upxDqiG59ouuc8ikxEuNvz/Ie1Sa

  Score

  10^/10

  redlinesmokiezinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2