Extracted

• • Target
    37599d377c0c97ca9ce827cb4aa236da.exe
  • Size 390KB
  • SHA256 d9be9ef508c52697215fe50aff6a4dff15349ee8a6327516a5df3a3a23ee8955
  • MD5 37599d377c0c97ca9ce827cb4aa236da
  • SHA1 7199560ff5789f73c221b0f026a6b678dd1786c2
  • SHA512 22c36d71ecffd778c52d0fc1c3157ed6c5d6b15e9da02becd6e6bd00a20405f945f72a273cf826c6f691a78e59b911fc4c537c7796ee9582bf68bb9b1297481b
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepaladindiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2