Extracted

• • Target
    33ced75b68b7c5fe98839f08cfd79f46.exe
  • Size 363KB
  • SHA256 0a32fa66f0b5aad2c68abb588f4b1c8fedc1479b136836c841d34b163b890105
  • MD5 33ced75b68b7c5fe98839f08cfd79f46
  • SHA1 015e7702c4ed5abcf7a13e62d837d80423349a97
  • SHA512 f8b89ad6c57fab5e87ae79d13534ef1943c55e9b88dc09e27783c26278d7199639f9e461d259d4495585887483655eb17edddaac68ba773589fb8c801dbff1f8
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline20kdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2