Extracted

• • Target
    f3973e4b7ac78446c3359ce145cf3bf7.exe
  • Size 378KB
  • SHA256 75080ef2f41e2c39eb552b9a3d20705291e0264d8bde72ec9333f7d0b304131b
  • MD5 f3973e4b7ac78446c3359ce145cf3bf7
  • SHA1 46e559705a443fd9e77d34b1aa481a9b4ae81b9b
  • SHA512 85b0431d94fb0a17346690a2b70168c420af0fe779509eb17083b6f399aae36661734472261422b065589ddde32956b4d8fe799298d42461d75436425b05bc62
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinemtadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2