Extracted

• • Target
    Quotation - RPT.0011339 - 5-7-2022.pdf.exe
  • Size 530KB
  • SHA256 d9a34a1c34cdb62ed77d841f76d9e38e613134f06b7b32e309acefdb8df768fe
  • MD5 6e8e665f430f18704d7b55ce4e5eb94b
  • SHA1 1d7ae17d3d402e3b3685c616dde83b3180b4607f
  • SHA512 cd9f3be66e9176ebe16fb3a471756f05b45d16fbdfc034db0b8ec54c32820e928dc028458a67236dd4defa6e0e2eb43763d899d48d9b043145fa851fcf73a3bc
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineblessedhanddiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2