Extracted

• • Target
    8afd36dce7142ecdcf1aad08cff7a89b.exe
  • Size 371KB
  • SHA256 4029f8f49d060f47a5b543d85ec61bc676cb28d7eac52fe708e8ee5277e1d3c8
  • MD5 8afd36dce7142ecdcf1aad08cff7a89b
  • SHA1 bc4121b3286c5f9bf16c689883fae0ea85f03d79
  • SHA512 0ffd5360e0a3827bd6e20b628a54314e4547615fc64c83e994afe29c94628ded4e3655294d1e3214d290d72667cfea91df22b6e41e805ddee770f28f6ca5baed
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline1309discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2