Extracted

• • Target
    5ae2838eb9054c3f699e49fb83bd1232.exe
  • Size 253KB
  • SHA256 ec75905b71102bd56759f3a2d38e8de6407ca30be2e22c270249613d200f4e53
  • MD5 5ae2838eb9054c3f699e49fb83bd1232
  • SHA1 d5c1b71ad49992fa6b3302f7962cc910bb3bbd7c
  • SHA512 3976109260347e8a18313dc6e698fb34e6aa233e1996f05457f9e5c775bd3dde412adae5a84cced4d34928bfb431efc03d9628005cad416e0c25795c2bb15fc9
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepubdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2