Extracted

• • Target
    5c3204e6915eab6113dd6ee3a2de7779.exe
  • Size 419KB
  • SHA256 d9f6f258e09d8a365d2d570732d36b175d305feeded2850a958f3537d5f30cb9
  • MD5 5c3204e6915eab6113dd6ee3a2de7779
  • SHA1 ea23f0b6c3910b5c74823d31e3c4ea26d8b2986f
  • SHA512 7929b968435415f4093ee98e869244f0b38eea44361f0ecfa3b9a95be359fa662fdd3c1a2cb7687d725d0cf82ec70143929b0d9597fa6f3c340be61514e62fc2
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepudtdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2