Extracted

• • Target
    89a13fb9b49403f42387c9686a5f529e.exe
  • Size 306KB
  • SHA256 92a3fd751ba151dc62dcd9e6f7ee5d1f3f58d22376faa5bd3fafca772fbe8034
  • MD5 89a13fb9b49403f42387c9686a5f529e
  • SHA1 f3ba50a948dfcd28e24c9c16b3bc32f438007488
  • SHA512 5730c740f0ac50333bbfa9150ac4ecbd1bdcfdb1a275cfccdf02332fc614eebb59be2f812c24c2e220f800812623eb279f812d9da345d2b04706bbea1be79ce4
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinerabotaitvar'mixdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2