Extracted

• • Target
    d253aba64cc5370cd806ea862a11c2dc.exe
  • Size 283KB
  • SHA256 950bfa5ec6f7e8987aeb2bc6584d18bd3ef83942aa73c3c42faa9389030f0691
  • MD5 d253aba64cc5370cd806ea862a11c2dc
  • SHA1 29379ba2e2c6f857aec730ce4cf28ea0bb21d54a
  • SHA512 aa42a3305d9193cf3bdb4decd8b3ae2166b0bf8c0a08ad531c075d533df04b71ee2845ccefdeca9c6ee80e92b5c319e1733e35545a74b52dcd2c36b605023d89
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline#proliv4discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2