Extracted

• • Target
    466ae10dbcb16c71a523a2f03144d1c9.exe
  • Size 358KB
  • SHA256 f1a5fa05cf56545d866bf1caea4cfb7cd409fcbc6792892658f6fdc32679e08b
  • MD5 466ae10dbcb16c71a523a2f03144d1c9
  • SHA1 c4fede3a49ca4cba33f098b528ce5bca6a255eed
  • SHA512 ea58ba1e542632659cf7f77ae46eac90ba4a2d8c8e70eaabdca568ec824c4ad047fd38176bf068cc544a690d9ef493afc056ea5b3e87c8f7a8f8c5c9c49a2793
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepaladindiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2