Extracted

• • Target
    8d89caf56e2bcec132c063ae2ef67b1a.exe
  • Size 334KB
  • SHA256 4c16bb3445ec6434befecf58184c53caceae23dfacfa7e38a2f3970e7fd60775
  • MD5 8d89caf56e2bcec132c063ae2ef67b1a
  • SHA1 b63ba823debc7cb48cf9a72b32d417cf8b9fcdca
  • SHA512 4639424af23c00ef61aa4eb8e01c3123800ffdbeaef524c2e7a312843d1bbef8134ca17e497355ebcb8f54c5fafc0ada2026381799622da883b4a299576e8e8a
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesomeunikdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2