Extracted

• • Target
    36bd83eb0a8ed60c434c0c2cd1944b7b.exe
  • Size 304KB
  • SHA256 43a033ee9f24fd518ec91ed99b5082cac45e0d3ced6955a68f14a919c30b478e
  • MD5 36bd83eb0a8ed60c434c0c2cd1944b7b
  • SHA1 37e2f2ee6eb2e4d4aaa38991ccd789ab49022aa4
  • SHA512 02663c6bd9b946181c84da95ff7fdf7ad066897e7f32b05db74142fb9f1045c64616c7a9428c887ea5d3c8d36a35f06a1f93a304e5ad79e18f882982a8bff419
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepubdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2