Extracted

• • Target
    7b8ad57019805469fa7656395b25a4f0.exe
  • Size 1.6MB
  • SHA256 22696addf1f91983f1e91b07c907775c2b37b438eccdc615b3dfbf6e0d733963
  • MD5 7b8ad57019805469fa7656395b25a4f0
  • SHA1 75e4e87979472022e95a369b059934293153fb6e
  • SHA512 e02e04835647217df3c905b13720408da8cdc80a54729a52578727dea25dec4fa78d4abd666ff902b5224f58ae6383ecdc9f782d41a18747f6bbddf65135d231
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinetama4discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2