Extracted

• • Target
    bfb96f49e08ba58a36a01a8d9f290894.exe
  • Size 410KB
  • SHA256 33dbcd449054ac6c2580e7d8384f40425f685f554402fe4c30ca2ed83938fdc6
  • MD5 bfb96f49e08ba58a36a01a8d9f290894
  • SHA1 89cebdac8c188733c4aa002c4186d43b4bf01f4f
  • SHA512 3eb4c0ae2f958c922ff76a24434f8bc6dcb56d4e53326177cbb01fab4b485a6e9f807b71282df26cdf697c828414c02f49901a4d4e8aa7f342ead4dc56b46f5b
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline170discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2