Extracted

• • Target
    5e52613e5fbaae6ce535a9a43fa353b2.exe
  • Size 411KB
  • SHA256 1ce32d78a0d5f2a8623e73bda0e042a9d129eb9211b2b25ac3787e4c59bb6338
  • MD5 5e52613e5fbaae6ce535a9a43fa353b2
  • SHA1 aacdbc24c8fe85bda87ff37f76e04e670f343dbd
  • SHA512 af9f7f92495befc6e6ee1e558eea845747c19bcc36f4930a4098f0c23d8a1f5f373bd54c9a626cb0ea8f3998765ef1f41faf12ff867debac9b806ff27ce2247d
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepabndiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2