Extracted

• • Target
    96a4602a632d5ccc6e7dd4a06daec5e5.exe
  • Size 359KB
  • SHA256 c66764b93df9c99eefa1b4de4103d468700df6e547e94d974d7fdb1bb658aa14
  • MD5 96a4602a632d5ccc6e7dd4a06daec5e5
  • SHA1 765576f3fced5e02def052800165047b4088b394
  • SHA512 a4853e0b4f5a6d81e76a24dbeefd5f696cc2d802786a86f6c005ff54404899ffdf35fc688ad5f606dda8f40ece4f4822c43d402516d82d4ef1f5233e4fb0003b
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineutsdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2