Extracted

• • Target
    f76c8f768c9d8bb29b4b612a8738e419.exe
  • Size 416KB
  • SHA256 4085ab42a1fdb112b69ddd3c800e14db649689cbb20977363a11abea97586882
  • MD5 f76c8f768c9d8bb29b4b612a8738e419
  • SHA1 30ef0bbde776013d9634cf595e636de1bc634c2b
  • SHA512 e22dc9a806adb8a281ba395dd02bf0ea8f2f919b7d0f9099497267c0661f86e1bfd35b6a73a6997f0beb75ff31beb8170dce5b2a138ef284f14d155031e6e364
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinewwdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2