Extracted

• • Target
    026ef06e16b61410866ec958b432ca80.exe
  • Size 403KB
  • SHA256 542592d8df18ce17532f306f2b60c056657fa50f043c879146858e6bfe9d8a02
  • MD5 026ef06e16b61410866ec958b432ca80
  • SHA1 b60d55ed31e8ae42a547f543c5195ab39bec63fb
  • SHA512 aa80e867df3b60d28540bd037ebcf1c10a6ae1d23e5a92d375a8f336efa3d509a5ce0b706807ff20fe0bef52c926b41c15cece936b7a1aa3b74d7f70f3dce9a0
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepalpadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2