Extracted

• • Target
    b0fc8f3b950a475b438837bf5e98f996.exe
  • Size 253KB
  • SHA256 ef802bdc93dc58499db371f595959d532aeaddc4777df6ead932f2cecec97a61
  • MD5 b0fc8f3b950a475b438837bf5e98f996
  • SHA1 0ce3e1baef325bb99756702590248c3643dd797e
  • SHA512 5d27a4f97cb130905acc99bfef912306c0c38e5cb36d513554fce10713a4344a95b0ffb1bd098d5fde52053441f9b0cff257339386e540dcce379fa2733a460a
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineudpdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2