Extracted

• • Target
    995cce8a3847b995d70f0d3148b782a3cdbc2b1297925.exe
  • Size 413KB
  • SHA256 995cce8a3847b995d70f0d3148b782a3cdbc2b1297925dcb654bec2504bcf946
  • MD5 65bb991af07e72f16b54934ca980ef35
  • SHA1 07cd3944226996c10b4a5636111d27d17bb7649d
  • SHA512 9cc66b7a48be37460335403c0678b1c908081228a0d6227fe03524ae43c46fede06cd6835f8bf08ec42e106627a63eced1cc609a647dac0a64cec3c5a14bb922
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineonediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2