Extracted

• • Target
    47e86cc0cafdce94d5c05a5c9c5c388e.exe
  • Size 1.1MB
  • SHA256 1d7d718be5b978fedd1124fa44831ba54af5bda0507f6eee05a0a8c8d9badda1
  • MD5 47e86cc0cafdce94d5c05a5c9c5c388e
  • SHA1 de4fcbdcc06a0d748a82666bfc1ec4e4a08e5be6
  • SHA512 e8d4012ee736c1d256e03bd1756ebd5a0349c0b77903bf71ad80cf40ee3c586e32b1e1278bd54b6b58b58152a9382a4726b8242b98ac4665ba1d0ebecb50e47e
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline25discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2