Extracted

• • Target
    a5e4c9084b0f9840c41da314377970c4.exe
  • Size 388KB
  • SHA256 0acd7696d5dc482aa3b4110fd60c6b9f2df88545f6cf9986714a984673965249
  • MD5 a5e4c9084b0f9840c41da314377970c4
  • SHA1 ff54ec32fdc8d53b281e4ecf6fb38df83eb44372
  • SHA512 39debc1f6169da4f2b6492d8a15f9f5fa1733916fed9697b3541eee2f8a52b1b0281841e800d2655258f54956b0386d03eef9ad191ff2565365c011c9e87fd65
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineinerinoinfostealerdiscoveryspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2