Extracted

• • Target
    3843b1474c45fdab01bbca281796e5a9ced3206bfbda8.exe
  • Size 338KB
  • SHA256 3843b1474c45fdab01bbca281796e5a9ced3206bfbda80ca8d184741612ec9c3
  • MD5 b2fbbc23d8a4ff10dfebfb2037c5d530
  • SHA1 6594253ba32b42f9d3af241abe0ebf906ef9cd68
  • SHA512 bd1fc62e28762d16e0c2f764d7d4963b8c7511ec7a1b7cfe041b6fb7352dc5b5c32ac8f5c4b4ed5592148f2222b9233afe8a24022c7e5fb8f746e6dc89986288
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2