Extracted

• • Target

    6b8579744d4f9a2200a1e090181e4d6e.exe

  • Size

    409KB

  • MD5

    6b8579744d4f9a2200a1e090181e4d6e

  • SHA1

    130a983fc16bdcb13b4a119a30e0162304f540f0

  • SHA256

    558e3327ff438b57d187561ff840813f5087392a0bcbd26c918645d9dde26f19

  • SHA512

    aa8078e1ff3a13f317acb9766ccb1ce03f7285f78431988710691cb2c3a590adbd0f97a8ccb88f77c180c8f31585aef118d0a60d6e247dbf02cb38e4bbad8e8e

  Score

  10^/10

  redlinetestingdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Suspicious use of NtCreateProcessExOtherParentProcess

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2