Extracted

• • Target
    d68549067554697569e1566c1e4c993a7e84dae92fb30.exe
  • Size 397KB
  • SHA256 d68549067554697569e1566c1e4c993a7e84dae92fb30e39ac9f4fc184e48cd1
  • MD5 14eca5277b9f34afdf6445137f536d00
  • SHA1 dec70a64a1107aaa4737add0a3516c0dfe07353e
  • SHA512 a94578a347b7fe60c36f413b806809c1771127b12db73538e735c43bfa42f45b9a965fe92ffd09bef753e4af2b211a0f6ff295aed1d40cf1f46eba8d65703c87
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline1132044836discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2