Extracted

• • Target

    7e1e85f45b5af0c11a6f55bbbc8b4f7062a82df441b85563b6d6c4c47c3988cd

  • Size

    307KB

  • MD5

    0a7d739d28b5c574cbbd63d9f5a1d74a

  • SHA1

    6a412871b87383fb43c6e781228f6a5a83d29dc5

  • SHA256

    7e1e85f45b5af0c11a6f55bbbc8b4f7062a82df441b85563b6d6c4c47c3988cd

  • SHA512

    81677276f0712cc7ae564804eadabb18028e59521ada30b1291a122f7e6e17a3989ae4f7cca0ed22abba0b8a02daaaa55daf4286a4cd5d5c925166128eabf6d6

  Score

  10^/10

  redlinesewpalpadindiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1