Extracted

• • Target
    87A55DB2012F719D4A0F4F799F5C02CC.exe
  • Size 547KB
  • SHA256 bfcb8e1f198cdd9a25aa8266c1e39c496434b3afc8fe2e2d3ed40e1cf32eb932
  • MD5 87a55db2012f719d4a0f4f799f5c02cc
  • SHA1 d321a06047a7b678dbf66ec31737ffe616740c56
  • SHA512 7c8e278db471e969f9d7645371108b483a0c3208ce59930ce41bb5331f0a976efcc08b51d8aaf09c1ca960382c7e93d417384d06a1b3b1ff57c60b897c919ea7
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinebomb007discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2