Extracted

• • Target
    f78794279b02108386a6e2b73ce2d438.exe
  • Size 390KB
  • SHA256 bcd801ffcc3e97238eded74a880f756ad1ce240c8b4fb94ed2e830db58d0d414
  • MD5 f78794279b02108386a6e2b73ce2d438
  • SHA1 6412955ba0c0882e39c9b24070ba5588b1b014e8
  • SHA512 ef449948fc812536c5460fc59ddd3c0d4236a52111a71702b46f6cfe6a6cb562ee6794c5b37bc99cfff2d07b4ca0be42202fcb6a84c6721e287b699ebe7e40c8
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineredlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2