Extracted

• • Target
    546786da2b0bd97f39ce61ae69157e60aeba1dd176f1d.exe
  • Size 377KB
  • SHA256 546786da2b0bd97f39ce61ae69157e60aeba1dd176f1d1876ed2a413f2a48954
  • MD5 863568c466cf8d183285520a5875042e
  • SHA1 6d21c76e635f9bb60be1bd5c6aac8a710d0a2682
  • SHA512 5ab6d2ec9c9650ae1e05366fc390c89a15da1922b68cdb8373e5c25ea770750a7a91bc0d6fdff41493ae09d2ee0dd0f0d8ae73e6e5687bb1465ba09f8a947f45
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline001discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2