Extracted

• • Target
    dedfaa24909d03522a814068f9c00d5d
  • Size 377KB
  • SHA256 6f14afbba1fb3f07259d7153604a7877f9a0be968b600e2f82b6b491d4e994a6
  • MD5 dedfaa24909d03522a814068f9c00d5d
  • SHA1 d8a51ad14cb27a6f5db825792972251b804ed82f
  • SHA512 f8a8bd970637fb68c415d5e9d55b09f8b70eb7c723579ab32c450d44c9eb220e4161c590703d0df1085f5d071bd5b294dab33bec94d26f9e39bee3cd40d5884e
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline@sellerlolzdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2