Extracted

• • Target
    a50591d3d68eee6d022de3a7a04c5e70.exe
  • Size 249KB
  • SHA256 d85ba29638e04ffee56d821970952eb880fd13c9e758051cbbf075626a303fb5
  • MD5 a50591d3d68eee6d022de3a7a04c5e70
  • SHA1 154813fdfbb48dd6845aa3818ebc7fae668f431d
  • SHA512 8b33025aebd951bcbf34a9735b23af1bedb0ee7bbd37276e27b7c356baa86d48394a4397c3dfc13c571ea0fd2e2e8776cd9a019745b25cba3e107bb1887f66e0
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineutsdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2