Extracted

• • Target
    6cef81a5567d5738abdb75a0afccc924.exe
  • Size 253KB
  • SHA256 7450c7b95c601226ae700d5e47efdbcdd32f4cd6cfa4624dce5d21ee93092398
  • MD5 6cef81a5567d5738abdb75a0afccc924
  • SHA1 4c2c3a5af94c045c06237ed2d0113bc196d35e0d
  • SHA512 b2cea1149bb17ddb6f621b737a8d345cca370189e6fd1dc6a2b8591348a2cf69e7be646313539f6bf115e68060c784c5e16e67a9abb1ca22f8de5ebea203597d
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineudpdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2