Extracted

• • Target

    9a37472da0078857b95005fa34536d59f814c51ccca2bbbe2d00f33918bed187

  • Size

    240KB

  • MD5

    79dd4807c1ea556e971485411ded02c4

  • SHA1

    1c39048c99f4b970a7d03da25a8421c511fae136

  • SHA256

    9a37472da0078857b95005fa34536d59f814c51ccca2bbbe2d00f33918bed187

  • SHA512

    b24f1a2716264f9f906db114914f9c0c2a969af4481516aa3ae0d141a52a142fc4376edb7c530d375780803c3b4e25e3ec7bc83095042d1e181a1bf558cfc126

  Score

  10^/10

  redlineudpdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1