Extracted

• • Target
    7b2d3f7c318aa9eb4dc87f8dcb752dbc.exe
  • Size 441KB
  • SHA256 f0736c8a8ae3b67e960164e388fe0fd650ccb20bde878aef5db79e9d74a04e49
  • MD5 7b2d3f7c318aa9eb4dc87f8dcb752dbc
  • SHA1 f8528166ab393d90b8690fe4042e8d6a421df4cc
  • SHA512 730246b3d44dadef54a196fa15f21fa5e26142c272de2576501bff31e881b172e1a23accee211ed5e22c143b9c390f1eb99249529593513b3f936ef454c05a3a
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline50reddiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2