Extracted

• • Target
    f9dc8927bac5889a53c154af78d85294.exe
  • Size 335KB
  • SHA256 f400e0108dd5956da056a9159c2d328a8b6d71ad1e059f2a35d78dbfc7276a4d
  • MD5 f9dc8927bac5889a53c154af78d85294
  • SHA1 885ddd72e1a3fb9ce017e628bfd73146e9240060
  • SHA512 4b82269229f4883f1b9f6f82fde252dc2737dc4789f31f408884664a16d5974c722c2dd627fa9dae900b6f3dc3fb4fb6f6527ecdde05995b04ede044a5de37e2
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesomeunikdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2