Extracted

• • Target
    1053a56cd35c2f1f56454de2b68b2e07
  • Size 858KB
  • SHA256 9c183568a371d5bfd048cb80caed15756b50d8cb7f5e3e8ec6bce045c35216ed
  • MD5 1053a56cd35c2f1f56454de2b68b2e07
  • SHA1 166c03318e6537f41b7ef5200325e8531b55ca3a
  • SHA512 a755a8fcc2445cc732d2da35fbd33502f9869704e213aa89d77f7fb618372fd55c20abe6297aa0643fffd1ac189fb4644e2e94ad398ca00f1eff8ef0c3d20f79
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2