Extracted

• • Target
    976fe2de773589d98e442e3cd0c3610f.exe
  • Size 290KB
  • SHA256 4a95cb73ac80f5968df35e2dcdabe224fd627041660aba54c4533ba1ca0dcd35
  • MD5 976fe2de773589d98e442e3cd0c3610f
  • SHA1 52d1ff5a149b85728edbb4f2481c636d1e6b95a6
  • SHA512 a6857a100ae384b3af2f588e2b22c80daae66a4da9c2b93fc6f50268f4ec2bb5d347276bcd23b784e6d631e92bf5d7eda7a30247effafec69eae64d037ea0f21
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepudtdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2