Extracted

• • Target
    ef95ca1ba82a38307e10e5d9b83f61c7.exe
  • Size 304KB
  • SHA256 5b27228c3dcc29a594689bbc6c4d21bfa312e4afa9dd96f54b696d4f9761a48a
  • MD5 ef95ca1ba82a38307e10e5d9b83f61c7
  • SHA1 7e864c0a206a2b85cafa70ee5e4f1c8580145c19
  • SHA512 67933d099ebbd818762a8a2805e96cefd7e1c2d91a8f54666c10e5d18cebbc47f78aa5cdc5e18224acabec0dd9f9dae9799c2f2aff16f7021d334db205ac8cb8
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineadsfelixdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2