Extracted

• • Target
    9765dd2ca441a3330941fa56939c0037.exe
  • Size 137KB
  • SHA256 bac25cb9a84a38073693bcf767fbaef4e045012e79fa4462c5ef28579c52d704
  • MD5 9765dd2ca441a3330941fa56939c0037
  • SHA1 4366dbb2a77b2373e7e9d8a3219816d07cbd4e7e
  • SHA512 8f2e26fde61a54f8b9808411cc5d148af12af4e7253f9e4871ee03d13713a2485752e4282f16dcb17d9d3cd7fc4588f4afb8eb234c70f9fff5c26129af36bfc9
  • SSDEEP 3072:kYO/ZMTF1JcoA7hZ4aUsyqyVKDFTyRPEh9SSwk:kYMZMB1JcoKeaUsyq7UpEh
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineinstdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2