Extracted

• • Target
    2f79b70458c2dc473d74107f577f0100.exe
  • Size 407KB
  • SHA256 a426c2090b8c2777661236aa54ce8eb143af9cc4c1aa8aa11261c6758a970921
  • MD5 2f79b70458c2dc473d74107f577f0100
  • SHA1 e32c8f0bce272996d95fdae57c1ea74b0a48fd12
  • SHA512 5960197234f339fef0a01a123ab38b83efbd15511b35cfb61de0edd7c5ce2a42465482f7bd3d42f94b5e6fb05c613e9c47a2d17ffcad62d7e9ce06d65961711a
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2