Extracted

• • Target
    835b87a384f53ef1d7417046e43c4fc8.exe
  • Size 411KB
  • SHA256 af93e6a53d25e1727a2294de646d2941d94dc034e1c76eb3f34d129e0ecf2e69
  • MD5 835b87a384f53ef1d7417046e43c4fc8
  • SHA1 523442d3b63542157ef7adc2dcef9caae6ba7e80
  • SHA512 5c4b7a357cff1a739f596b21d9e30644dcc07c0f9e0e4dce9820c1c4acef04f43d909010582116aebeab8dc22290d5e29f8d0af25af71c54496d3cd286e53511
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline170discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2