Extracted

• • Target
    c3fbe965abc873867051ab178296936d.exe
  • Size 358KB
  • SHA256 321d63317ced77342c3941d1eaeb6afda9399d15fe0716db550ebc2c793d4bb2
  • MD5 c3fbe965abc873867051ab178296936d
  • SHA1 8090f27e71df4a876fe4be748b131217d70d685c
  • SHA512 5a3da4bbe1369266edb2281aa159392e2bf566227b0626c56796f1505dfe1a7d2276aae7a32c33ac5071bf23b91176039d7a003df31be34b5381c53e8bc6c337
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepaladindiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2