Extracted

• • Target
    68ef9995dfed0701492c903841faab1abe610abc1bfad.exe
  • Size 410KB
  • SHA256 68ef9995dfed0701492c903841faab1abe610abc1bfad2408225dd54984761aa
  • MD5 7edf60b6ea6605278932218461dbfa9e
  • SHA1 0aa8db121b8f6b73a9f766283b49323e514ee7ed
  • SHA512 01863b8c82ede1b0b3e89b6c1f044ab08bfb9924bbb68f33c4f79f1d89415fa997fa5ccc1ee5549c0bfe7e459c25f6ca1b61be59bb547999fa23cd1f38d3fc17
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline11discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2