Extracted

• • Target
    d1dfd5c3a44785c1764ecf2f6cc6fd00.exe
  • Size 345KB
  • SHA256 d1a2a57dafebab240fcbd9a0106e28293d27309a6079bcdde2ab71439e070cc4
  • MD5 d1dfd5c3a44785c1764ecf2f6cc6fd00
  • SHA1 d55b42fef3afe812b353f7ace8d7efbeecdf8270
  • SHA512 5d73684c18963174bf63aacb9e274cfdd14bcd51aba4e79b2551b19da7e428686d7795a3cad8599618d417b96e4c84ff103f0a79da6f2b7246a1b1173868853b
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2