Extracted

• • Target
    0826739c586a82c816d32cb9034dccb6.exe
  • Size 401KB
  • SHA256 dffc96e5487f30252d16fa0d9ad5cb3e05c1298efe91f6b90deaf1a33918a6cd
  • MD5 0826739c586a82c816d32cb9034dccb6
  • SHA1 982fee4a04ed018d3d745304139450b58dfd55b1
  • SHA512 22151440665e0d4f4f1d061b0b68f9a87649ca5c52aa10e8cf6b050234958bbb36511a3d4dd5c7622e73a85f8495bf78992d6d358136e6ec3f9fe41363ff0496
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline170discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2