Extracted

• • Target
    5b0192d31dcb9a21714e0e0c9a2cb202.exe
  • Size 996KB
  • SHA256 023e7c9e73b997a33476a2d958fb237395b098872854ce2e92af2b89cd87ca7d
  • MD5 5b0192d31dcb9a21714e0e0c9a2cb202
  • SHA1 14b1574c8d64a8516e59bf26e115d416f52093a6
  • SHA512 45e29aa8c9f95683b7390a1bc5c3afa2c6a664036175e6f1a87b1667b952ac29e9ed07bb8603231edefa127f7d91a8812a0a9faaafb2781deaca2acce2fb2fc2
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinefirst builddiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2