Extracted

• • Target
    d961c824966a109599e6d786b66503e3.exe
  • Size 410KB
  • SHA256 862955ebdf7e3769adee92e56525e3d8a4994f526f9bd67a17ff5f5750e2881f
  • MD5 d961c824966a109599e6d786b66503e3
  • SHA1 57793da40934599cdaa17ba9a8dad979e50da2f6
  • SHA512 fa8acc85f684a810cc77581fae05050dd6801cde75cf6045fb9128716c3c72d4a3474245e453758478f9073c84cac35b2df35999a90247a085ec16e58ca83568
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline170discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2