Extracted

• • Target
    ba7d1b15134995c9aeee02f7991853e9
  • Size 276KB
  • SHA256 d65dc2b63a0f4c3d6d66aa6e39d377c2a20cd428ca861f019df2ccb730184f9f
  • MD5 ba7d1b15134995c9aeee02f7991853e9
  • SHA1 52e094faa669225efb59d0ef35f565e5fc9e0a5c
  • SHA512 12c5435015f2792f5427a3d53c4014dbfb1db6d9b85860c227deb2d9c091bdd58fd9671a8a9d03001283ffa224d7cabf66a381a7a03851343e72a828a031e822
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinebuilddiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2