Extracted

• • Target
    b36b848e61744e9d63ef3d1e7a2266a9.exe
  • Size 407KB
  • SHA256 9628c80e4407f6bf7eca3f6400d1fa0316248cdafbc78e6dba4ea65a87f27829
  • MD5 b36b848e61744e9d63ef3d1e7a2266a9
  • SHA1 3f782e2d8954659efa0cc86f009a1451de97c737
  • SHA512 049459375aaff1e4a2d513801d9679458f0ce0e45587d67e910f3cb2bd8fd01c70617aef0dbc5f6793926b4cb307270e80fa7e2155992a405e56c32c05823d00
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2