Extracted

• • Target
    652174b7fa6945f30bc078d39ba1d048.exe
  • Size 328KB
  • SHA256 c3e0549cd76ceabab50401d72e23ab89b43c2e82e262aa1deaa9bf16a1aa5be9
  • MD5 652174b7fa6945f30bc078d39ba1d048
  • SHA1 f1ac626f2d149b0967956d4ba0300e55f344453b
  • SHA512 85cdfe0c21b768e60dab2b52be4877167a87487243b360efcfeadb83e7f8b98ccabb9a53bac565730c7518f19d5e8c4c93ef24296029c736e5cec993592c6a11
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesewpalpadindiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2