Extracted

• • Target
    14cf30e247db8388717b8a1eea2ccd8d.exe
  • Size 320KB
  • SHA256 176acbd438f1dbf033098a230dc2b5066b38d53a2018a4da03c6cc2bfb8ade99
  • MD5 14cf30e247db8388717b8a1eea2ccd8d
  • SHA1 c54fcfc8470b124096cbb3e1333f7d2866a9b8d2
  • SHA512 4c2efb4c847f1cded11c1f34553b8142f8f42053f84b40a2fb97b2a46ab6c3df6c17c21db43a13e681a1e86851fcf24fefbe988a18bffcb13055f9752036c7f8
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineutsdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2