Extracted

• • Target
    dcee839332b26e11aa52d17c05c6e3cd.exe
  • Size 445KB
  • SHA256 2803855499d5c79b146c5414f54a14fbf771bf7a85d43532e2d0abecc3bf0b21
  • MD5 dcee839332b26e11aa52d17c05c6e3cd
  • SHA1 fbc541b160d197d3644ec93d76cff3c1212b2206
  • SHA512 919e070234ab4722b1c92a236e25c70687bd8c42ef7d1191cf0044789760372a03af6891998c807a99e5c18ec0e59e8c16b7b25288bf214c319ec4ad3fd7e3e7
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinewwdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2