Extracted

• • Target
    37e2f3747ba14d509f40ede4c71a6eb8.exe
  • Size 240KB
  • SHA256 ebe7dae54e5671eeee3942bcf00e3137bdce8b1e5537df9d6d84b09954ea6d11
  • MD5 37e2f3747ba14d509f40ede4c71a6eb8
  • SHA1 893e7555836ded53eeee4dacfb542db1069c464e
  • SHA512 e36655d6094e83c72349731941d63b6ae55431f55820d6e4d2611e17a99622d933ac9dbacf1758a0f40c60edb079a700c2364d4e4e5e81767e01be3c71b18011
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineutsdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2