Extracted

• • Target
    d90f71d95a47b5c1c642ee08e42fb6b8.exe
  • Size 262KB
  • SHA256 07d5bb43754bcac0d33cb5945088e252502d4d9f9788e20ea9988e67311d32c8
  • MD5 d90f71d95a47b5c1c642ee08e42fb6b8
  • SHA1 15f4b7c785dac6bb1c5569a0205bd9ad462f926c
  • SHA512 6718808a220397b4d1666cbb3035bf8199b749358d209d2d0f5580da83f8115f503e582d61457eae52d62e9d6998f302e7017b3b70edde021f1083105f88edf7
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepaladindiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2