Extracted

• • Target
    Run.exe
  • Size 335KB
  • SHA256 ce2ff7b57590b7da15183e8906a59c5cc94c786b44b6248c7dbe50dfceb917f2
  • MD5 773a73b58db42b4a9a401c7e1be205da
  • SHA1 bde374101e34185608e6c5845494e22144c6954c
  • SHA512 d91999dbdf130b9d44bc2cb0e577974381c288217e49cb062817d7cd22c83e35482d5464f0537652ef44ef4638c509bc566c540893b0383a637e931e043d505e
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinekingdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2