Extracted

• • Target
    3a38d0084af62f289800cc7b67cb340e.exe
  • Size 415KB
  • SHA256 3b2e661e296069327d5b3cc951cefe737c8f5c3f3d31685f6fffee124e704e2c
  • MD5 3a38d0084af62f289800cc7b67cb340e
  • SHA1 243973647005b1199f63694651137d34c3f8b7fc
  • SHA512 3d14504808454a77c0b3603934e2deee1dbe67a5f9f2f66dab66fb96378896bc9579c9f70451f73f35682c04d99200baf3f328cbba4e82355d9cfd6b48877b0e
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinewwdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2