Extracted

• • Target
    18aec66c21c2075256d92a9b1811effd.exe
  • Size 323KB
  • SHA256 cf311718acbe2de4bd6dd1c3ff3a819665c27b60a8bf144a43f9cc028d9736b6
  • MD5 18aec66c21c2075256d92a9b1811effd
  • SHA1 ec92366230976e45852857c333b756f2ef4ea52f
  • SHA512 d02b8875bac6611e6d206f8bd2bf33df6e795a01b1025f2e432a72c1b0e00bb995c6ddbe9f5d46e610f1227cb65d9dc2672d272fc18efad975a078c43d4ad044
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinetriplesbanksdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2