Extracted

• • Target
    3ad87fbcb98cc43b59cbbe063ea69a20.exe
  • Size 142KB
  • SHA256 3019bf7aad3f4838d64c6a648b24ea0e6f8a652ba2993e5b5b2b4e9527b0968d
  • MD5 3ad87fbcb98cc43b59cbbe063ea69a20
  • SHA1 7bf23b06e609bdf213e56b1ee820eb5d326f9d87
  • SHA512 08f0fc85574bc1babde49c77da9b5f78ceac9325d053a3ea974479c06d4eb20223ac401318d2007bb138e11c51cc37a09a26542d98d3fefeb8c28244815a0f4a
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinetradingview new!!discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of SetThreadContext

  behavioral1behavioral2