Extracted

• • Target
    c0683ce487e2a1407ba4dfa18c13091a
  • Size 318KB
  • SHA256 8832cf1dd4faca7dbfad5d6629a6a5e6feab4e15f97655179f91283283a4d51e
  • MD5 c0683ce487e2a1407ba4dfa18c13091a
  • SHA1 a7cbe43fa202d938e645c411f2b368c962424a1f
  • SHA512 71344205404d275a15fa26ba60dac83e0469b5ab58a3a629ffbdaf6ec97793cdf93f4dd382c38cc05b6be70afdaf66ac88c734c6ba14081135c0c7f583c6754b
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline10kruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2