Extracted

• • Target
    af4f1d3258ba476b0ca39ba1b17b6a8c.exe
  • Size 407KB
  • SHA256 8e88a317b2a066bbf484f480b1d982880d3749a0ab5d33bab5de59bcaec22b5b
  • MD5 af4f1d3258ba476b0ca39ba1b17b6a8c
  • SHA1 fa6af8a445dd960031cb9183e191b55d3c299843
  • SHA512 ed4f1560ac57499d8bdaba2d0d2d48b26877e1567847d3ff39917c5e29731f448f6bfdfd6610a349a754e2dc7c6a00ebb3eb9f88511c37b9565007e778a04512
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2