Extracted

• • Target
    4fc4cf8211d805832f0682230b4e1cd7.exe
  • Size 304KB
  • SHA256 26efe12dde9ae5aeaaad25eec96f2ea4e9d7890919132a6ff97f48a63599e613
  • MD5 4fc4cf8211d805832f0682230b4e1cd7
  • SHA1 f64db75b22dc888d1bb15f227c0bbfc47f9dba1f
  • SHA512 2b5ef2c60fb2ee63b2ae436209b53c4327e02fefd6cd9dc957341c27fa73e61a5e501293bd550345ef7c611a13cb76d702a1cedfd229cbafda8b7fd57f35d21d
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineudpdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2