Extracted

• • Target
    095b83f4d41033fbbb314cc50598d8dd
  • Size 292KB
  • SHA256 c1e29062006d8f7dbdf73c09956b1de2ea441db7e0c8798dafbcd3b7cc401c5e
  • MD5 095b83f4d41033fbbb314cc50598d8dd
  • SHA1 ccfae62aa92aeb256055c3e8146943ef928beac5
  • SHA512 048f10173f6bcf1c5ee3f643e1d4242f866517dbfb2ec607b38ede5bdb04e240e0fbc8e5c695b4f589ac2da0407b808bc32d8e851d6b9cf42d7f59a81b3757d0
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineafdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2