Extracted

• • Target
    17447771c2fcf40766ca06575aca5ab0.exe
  • Size 410KB
  • SHA256 d7d0e1bfe505a50f8b73b2da9a2203169d7614894efd7d708a952fe9d82e06f0
  • MD5 17447771c2fcf40766ca06575aca5ab0
  • SHA1 6775a85e410d7f9b76b0ced7623c33bb15c234ab
  • SHA512 08037e16dc08fdc73b11a489d61b4314ee0dabe862ff0794d4d9ad6ea4969ae6c20f43e8db0c23e36c6ff4b554a79775622553e98dbe500de48bbd29a44a56c4
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline11discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2