Extracted

• • Target
    044dbbdf01855216e3e5ab846c37404f.exe
  • Size 401KB
  • SHA256 7fb2c941ea70e0e1f4b31a601355f0d53ee0d9db8f2adedab21437d7cb8dbc78
  • MD5 044dbbdf01855216e3e5ab846c37404f
  • SHA1 2d19ae48d6a5b0871248aecc6c88011dad496d2b
  • SHA512 f5e5179c906b674dbd27013b5dbe7deca692792a34a0e1996a0fee466bcd0f61b376590b850f52f85d14c6c37e73a3f71cab6c58f1ba806da9e31308d3fc5088
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline170discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2