Extracted

• • Target
    c860c9ad72d942568c59ca6f68757fab.exe
  • Size 407KB
  • SHA256 bb3fc2c2e7f03a347fc3e0081c620c859c622deba99bb451d5273d737699b936
  • MD5 c860c9ad72d942568c59ca6f68757fab
  • SHA1 c0975dd3ce42a5d3ec9c21ff4623f9e46b6e7974
  • SHA512 0fa5604624e322796a8c9327055c3323085447b03152fa611774dbee8bfc94d4479919982170971de493fc52261cf470a315f44331e4fd72626e6ee56c95893a
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineadsfelixdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2