Extracted

• • Target
    24188bafa1b81fe91ced2217aad95db2.exe
  • Size 322KB
  • SHA256 7cdbe74716feacac4e8b905bec4d80a6071db6909031ceebc0cde0ee4d562806
  • MD5 24188bafa1b81fe91ced2217aad95db2
  • SHA1 dd1cfda97521e2d8b912bfb9a3a6958c13b2d314
  • SHA512 7584214c26aff2660ed606b0404284117facc6f2cb3e74ab736b3abc03485a7774eee394d754eb948af7dda69f33d805eb69135ba992bff7e1b62e867b45edb6
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinetriplesbanksdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2