Extracted

• • Target
    af025a91ae32e80af818e5e49fc4bf54.exe
  • Size 224KB
  • SHA256 eb16fe53e16a0d808f617f7a9437e58fa60ffb8c190171277fcd3c4620d95fdf
  • MD5 af025a91ae32e80af818e5e49fc4bf54
  • SHA1 bc03965cbd70774e8a5b6a70a7d70f24948ada05
  • SHA512 5fa48583f558641ff7f94ab43de5b75ad9e17acdf5fd2adb87511f5f86ed44fdbee91ec1045a5365a517dde81a845f341907ae73d356278a5666732ded947685
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineudpdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2