Extracted

• • Target
    5fbbf8d74c8a2b3f6aabf4a95c1b68d9b5ce182ebd19c.exe
  • Size 440KB
  • SHA256 5fbbf8d74c8a2b3f6aabf4a95c1b68d9b5ce182ebd19c1f3c8eed44fdddc72c1
  • MD5 a5058f0c8a12e82ee4cd0c922127953b
  • SHA1 c185e04a9b51c818c49c6ccc27cca1c674906ec3
  • SHA512 19714b2d5b6c228245c68672ec677cab054f8532991078c628c462ab9d131ba4b3defb1c953198f6132a55160d40acf42cd56cc0356a8f905d96f51c0ce5f7c7
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2