Extracted

• • Target
    c2bb54976faabcd1d73bf6296215b080.exe
  • Size 222KB
  • SHA256 2adbac35f12bc202ce13cbebd7074459b575fe81e2504282b3f03cc56e4834f1
  • MD5 c2bb54976faabcd1d73bf6296215b080
  • SHA1 3542eddaa4394b3966d4935a4e2e1d9aba22cfd6
  • SHA512 15920d8ad3e377dac2c95cf733ba14f46949699e06c1fe1d160c04a5c49646edcdad6ee8639684eb2ff1c59f75027398963b349c29247c5c89154c4699abba96
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineudpdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2