Extracted

• • Target
    36c0f009d48d0b0b54d65a86370e1d9d.exe
  • Size 249KB
  • SHA256 e28922e1df7dabbd61838c7d0d9deaa0c1cd897620fa3988f43fb99d28bafd90
  • MD5 36c0f009d48d0b0b54d65a86370e1d9d
  • SHA1 b1fd40cb4b19577c73d60cf5ff832c591519f202
  • SHA512 d9ee4f77809af2776a223d3738e7f723a579d408bea178024c0357fb6e91d1b0e7dfab7fccc55b4391052294e746ffeb68c57aab085c4183afc1064ad4424d47
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepubdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2