Extracted

• • Target
    2a06fc770c180b66f343eff87eec3fc1.exe
  • Size 410KB
  • SHA256 fefccc5eaf9f17aae12cb2ef937c9ee5a92598613100dd81b02e9280ffd72a6c
  • MD5 2a06fc770c180b66f343eff87eec3fc1
  • SHA1 a12eb98d5c4a2050a404d9d58ee6050bfdc1b5ee
  • SHA512 ecfe65a8f45fe8af2bc5630cda59f84afd554fcfe5ad915f9119d9ba277add77abf22173a13db87ff478f1d6be1ded053dfc0e4b0d62aadc41433a7c4b1f6ea3
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline170discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2