Extracted

• • Target
    ef37310304476618b4f4bf9b22697683.exe
  • Size 358KB
  • SHA256 6b3fe1557cf507b4e43bec902d01f492a217bfe535dd03e9f612f7cafccb17bd
  • MD5 ef37310304476618b4f4bf9b22697683
  • SHA1 be6a9fc5036742d7eaed36691e06674d0b8563ec
  • SHA512 e347dbeb67739d36c67982bc125b0c66aa3da0f7260e188b1ad6593cabf8904a1fcd1cc5b11afbb3e65719e87b0dc15b4fb825e124b7f1cf09a8c76249837ec5
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline423423423discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2