Extracted

• • Target
    24d513394ee068f066ccbd604f4f718a.exe
  • Size 557KB
  • SHA256 39a9af2e4dacff39613bf2e27af27ca9756c98e178d082337a28480c8bfcb1b2
  • MD5 24d513394ee068f066ccbd604f4f718a
  • SHA1 656f25c0fe6fec97a15216c457c79ad7ee2ea832
  • SHA512 90834515c3c648970e2ae78d8569e8d15b71a438a080aec484d63a18764329e2b93e87d633cfa4d36c0afbd5d32887de2eb856a89125def4c602caa2c3e6e7ba
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepirmas bild v2discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2