Extracted

• • Target
    a3b0a8f284f32d0c126a5eb57226dc07.exe
  • Size 415KB
  • SHA256 a9a43a86aa3618296201e620b18ef1223dede66ecbb67e17fc6477a7d75f3d86
  • MD5 a3b0a8f284f32d0c126a5eb57226dc07
  • SHA1 b5fe742865d4cda5f3a89e09d7b189e653b08c1d
  • SHA512 78221b089a0505325074fa163f06e79c7e5ac13f3675bde617f0fe1ce1da06fc302bdea1a801513a8980af2e15d82214b38b262e933fdc7e625639bb5a65e90b
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinewwdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2