Extracted

• • Target
    0ba05e3c24a638b5233b24243400865a.exe
  • Size 431KB
  • SHA256 d062742f3807c2aea5e3e8ce2aad4a5b84abb04000459b9f7db3a76e9fa5f6c4
  • MD5 0ba05e3c24a638b5233b24243400865a
  • SHA1 20bd2b7f1c4ee96201808db8ba744f9cd9d19c50
  • SHA512 df148e1dcbba6ad0c7740c2940fbd62138ae091cfa4b2efe3f3070d0a9840acf47238c245c8fe51de187eb8b29c718d8be5c19449355c17295f70e53610432e7
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline11discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2