Extracted

• • Target
    SecuriteInfo.com.W32.AIDetect.malware2.24812.11752
  • Size 281KB
  • SHA256 f150c064aa08e8d327c99a2edf0811a9bb6e06398d0d846b69a0c321ff6ab259
  • MD5 83e6e738876fde792abae146193d4963
  • SHA1 a5b3ab13138039b198a3454d99fd9e43a5d10f3b
  • SHA512 59b2e9b21c983f91a064d1719dbc76e9f27345afa3571b0f03ebda034ab39ada767fbf5c150fc94328197402b239a4673283821a842bcb912b27831aa6258bd3
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2