Extracted

• • Target
    3a09a05ada813de6661be5739dc3c0c9.exe
  • Size 388KB
  • SHA256 e87c87c4a26902bc8bbd9993162a98bfb67bb20f9b06cfc0084f5301bec9b816
  • MD5 3a09a05ada813de6661be5739dc3c0c9
  • SHA1 f8aebc44296ea072d5282ea6a59921ca2c9d9c5d
  • SHA512 0b62bed29558985ddeb4e0977ed42411aca9d0955dd2e8fb7870678a8c5ef3fb2d4b2fd802f81d8914dfeebf39c0d76dac1ce3d9039aa5cc27c80f14c70d0b1a
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineinerinodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2