Extracted

• • Target
    3ec4f338e1a13418264997b92501c92a.exe
  • Size 405KB
  • SHA256 23ae5f7c3cc00fb68f44a20bc73903e761108decff2b71e0f5b4b02c2f0f854a
  • MD5 3ec4f338e1a13418264997b92501c92a
  • SHA1 4923f2851752e63d8c52785b7320ff6deb95b578
  • SHA512 054d18b18751b3f98125bd6b2219c54f188cee5dbbebee549b557fbacf4d02fc81de0008d30948faed17b486a4c99d2b6373f90b2e21433c43029ab77a1dcc6c
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesbrokerdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2