Extracted

• • Target
    5ed546d5135ca653e9db4a06e418cc5c.exe
  • Size 346KB
  • SHA256 d571f4c8d4e202e48bd37ec433a60a6fe8843d20b6afbc01c57e9cde330ed9dc
  • MD5 5ed546d5135ca653e9db4a06e418cc5c
  • SHA1 62dce31fd5ce1aa4514479a3b11a08e7e80c9938
  • SHA512 f6ab42a81b02f0ee87de7166b976521b350207891b8ca4002cc449a9e80eb9fce4a28b62d009292c8db87218dac626a5599887f7130edc54630281c919e62b3f
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineudpdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2