Extracted

• • Target
    272566839f6848ee53988c87b98176cc.exe
  • Size 322KB
  • SHA256 b9488e7c91f2ea921d3c0d9cc2f0ba17a4dfc39d5f60bb9819e385db830c6607
  • MD5 272566839f6848ee53988c87b98176cc
  • SHA1 e77e9c35a1fd89953632ad554eb3181fae7eee91
  • SHA512 99d8293d26cd4e3d3122f16dd675a8f540a236c81ed67c5bf05de989fa11c296244b03ce3a17c0d1fa093dd46cb4aa4fdbc72c731d263aeda299ae6a84ce1f38
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinetriplesbanksdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2