Extracted

• • Target
    2edf73f2cc11670b181703cd2e9c8521.exe
  • Size 445KB
  • SHA256 2d787af54231db009e8914bc10f52d4ae9a6ab632126fca2208f8e0201b307de
  • MD5 2edf73f2cc11670b181703cd2e9c8521
  • SHA1 f49b62d194c262447fb2d160ceed06d869616697
  • SHA512 5a2e3b8fbc25fc16c7c913204002b61a0efaa912f844c2d0d64ec1ec3e320d49685f25ee812e0375190169f97e14c0ae7114a1a198e553d82e6b101a8de04f55
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinewwdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2