Extracted

• • Target
    df907a94d3c3244cfba8839e5c99c86f.exe
  • Size 311KB
  • SHA256 c8c119146eff9de92e4f1bc4b47cb639dde298410a6ef2a2a604d1cbb9b23d42
  • MD5 df907a94d3c3244cfba8839e5c99c86f
  • SHA1 9d2d86cf1611b3fd2a0a9b6ad654ef51515ad043
  • SHA512 c400c04495074ca9f03854869b44cb47069b83427bc8372653b289b4c8b2262e470e23feb4f954eb49b6f2feb1ee5c1b28b9d68f2d485cc991951d0a8dd9cd8d
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline11discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2