Extracted

• • Target
    a5482604452bdc0fbbb566c3b63c2128.exe
  • Size 385KB
  • SHA256 6152b89328948e22cdaa7c340449bb172fbf4e919c05dd3ac84362ea7fec657d
  • MD5 a5482604452bdc0fbbb566c3b63c2128
  • SHA1 48cdab04af8f1ae273f7d39e9609748c6405f0bf
  • SHA512 a7e156ec4ee5f6a04ed595254eb3770704f00d022943b63716d062045e6624c641f9bba4d1bdf2e2d9f77b0d82fd25d67da888e02edd24a663557c5cdaae04a2
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinemix12.10discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2