Extracted

• • Target
    250a5f8df1e6ede5f3853add72080308
  • Size 100KB
  • SHA256 1d928c0f640e731208adc0736aca791af0ba7e7dfdad0800d9de2fc968ef0010
  • MD5 250a5f8df1e6ede5f3853add72080308
  • SHA1 5e16c6021a1f92bbe47240e2b3e1822b02acb87c
  • SHA512 ee5a2ead1f008c77711f7cc6c7300b05144b756915180a4ca6b09fcc3f02428f4a474642128601acdb901a2bacaa60e2d383255a55acb757eb51562b356d3f9d
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2