Extracted

• • Target
    25bd4c59ce54b70a79305a70bfd03e4e.exe
  • Size 435KB
  • SHA256 5d49e406c7f5e07138a3bea72dde6eac26aefd2f479b9898a2e752f67b5d40af
  • MD5 25bd4c59ce54b70a79305a70bfd03e4e
  • SHA1 c99d4b07d3df3ed4c94722eb47be2abed4e388a0
  • SHA512 18606584acb6b1e2b75c09a8c16352074a2a23bce2ae4bda97b229cadf1588ee87b7e034b99bd6441ebc39a161538bff8675aba8c654fd71574b6854ddae4d57
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinetsmcdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2