Extracted

• • Target
    192c23fcbd45670b17991a85f03e1269.exe
  • Size 406KB
  • SHA256 3ab85ab4a622b77f9baba6d13b5f74ff84d80d9b372074e56abb5c97d51a22ee
  • MD5 192c23fcbd45670b17991a85f03e1269
  • SHA1 eb5d37cd39b9fd27d37d9d7299217f642768bddd
  • SHA512 804a2a8fd2360cb6edbcf1bad2b6c0eb39e2e024f1e213086e6552f47781c9cd7ecdb177c6bf2c7fd69a4bab07f7aaaa2f05ea754aaf558513d2d1f9e9c38df5
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepubdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2