Extracted

• • Target
    SecuriteInfo.com.Trojan.PWS.StealerNET.113.32174.18740
  • Size 294KB
  • SHA256 45a61514d5ec9ef37d22edbd8ded4420f359358333c787ecd1c6997fabdfa374
  • MD5 ef7b65599127d99e73774095ebae9443
  • SHA1 9ab0ebb26109f463234d867d13a1b2a06715a519
  • SHA512 0f10db344ce9feef7c52a53531517401160fea251be0c7553830b31fec1ba00b2166e9aab7311a0c5d673e86c875bb22b8a8d6a3d28d5dfe6cbee4a0aab1e833
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline02.11discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2