Extracted

• • Target
    79fde7aaf79da763344c5beee298822c.exe
  • Size 411KB
  • SHA256 1557e19ddcf20de7ebea6bb6cb54539d718a8ab8a71f00ed3bd21b914418a49e
  • MD5 79fde7aaf79da763344c5beee298822c
  • SHA1 3dc474b0a43ba901c0e40052a32b732139407fb2
  • SHA512 266b968923e7c2a4c802257894db47b429f0c5a26ca7752a1da8f39effed51231bbbcab7f369b4a56ee43498a1ab8dabe25e5608c1935c48a4b972eebd2359d3
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepabndiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2