Extracted

• • Target
    49c18e08e08275bf512ffa81bbb950e6.exe
  • Size 224KB
  • SHA256 4f0c5d8a6dcb806c4bf49685b785b7080cfe91a56702e171c4bc50ab6ef4054c
  • MD5 49c18e08e08275bf512ffa81bbb950e6
  • SHA1 19392a00c558c40404c02ca3c97511da1e0814c1
  • SHA512 ff853663f4d2a263c9eef9b72614e48239e09ac0fdc30189d55b5e7fd66d9888eb491318a29acbc2ca94556dbe46657433a9b9b46e5f6a6811dc66d6b6fe63d0
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineudpdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2