Extracted

• • Target
    eb549f062c973c63fb2ec97805546a0e.exe
  • Size 277KB
  • SHA256 f9a298e5a33d42c1b8d929ddba5a0db9762d0ed6579ff44e9cf2d683bb019b45
  • MD5 eb549f062c973c63fb2ec97805546a0e
  • SHA1 47828373d96c466ceec9a454e5a9b210816a2f83
  • SHA512 bce68ec248c17053bf0390624d7e54194a10c0b342de089d9f7f48315d8ee4ba4d5d741709215e3dca7db39b0a43dcc85482c48886276f66339ebdd5747fb2b0
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesewpalpadindiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2