Extracted

• • Target
    156f188eb44c465c3d56cc5b5265b5a8.exe
  • Size 278KB
  • SHA256 dc0a6070aa94dcdeb01ddc73b7d368d4be7956e9edb3b193a409bb3bdb3094fa
  • MD5 156f188eb44c465c3d56cc5b5265b5a8
  • SHA1 72015c5a5b42b556566426317e8f1fd038d2da5b
  • SHA512 5f46e45d0cceb7150c5e4ad7d996a2d72da495ee4b67d316650be55a53eeb868a4ec4f4b02721581a7a71626750d4e65bd88ed8a2d300aac14980b8f928d73c2
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepart1discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2