Extracted

• • Target
    01fc1ff7cbab5ffa9e09e287f32bdb14.exe
  • Size 336KB
  • SHA256 88da560f83d58fc2bf358aff8e0ea334a39a4a8effc2441f1af5d97c05412700
  • MD5 01fc1ff7cbab5ffa9e09e287f32bdb14
  • SHA1 1a940792ae5bfc7067159d1cb178e1b69d81ccc1
  • SHA512 f05fa785b75a4e1f30437a6e0f8be840b443de32f2b23b6c21c8860492509792f075656237a5bdbbeda6542c19fd751569e959617582f70b06910ee300d7a860
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesomeunikdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2