Extracted

• • Target
    4ec3beb942ea57098b15b6ca8994aa16.exe
  • Size 408KB
  • SHA256 88081f66ba8c0a2b9ef60c2b5d63f95f69bdf99555cb3f60f8ff23b40928d4d8
  • MD5 4ec3beb942ea57098b15b6ca8994aa16
  • SHA1 b4bcab82e496069775e88137dbfc635eb0e9c26a
  • SHA512 7858ae434c7c346abab7bb509dc2c54cb8dbbeac1a7a668c7ca81a854ef89983cdd68a93b85cbed982e3a4ca894ad832f0785c42466da7678816bcf786d35c0c
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2