Extracted

• • Target
    3fa0cf3033eceddea6f61b6eb06c5ad7.exe
  • Size 137KB
  • SHA256 00a64977496c0703207293d7df9e24620479929a0123845c32f9ccc4688c7265
  • MD5 3fa0cf3033eceddea6f61b6eb06c5ad7
  • SHA1 8cc2367e87e4866cc707b4dcf8e93ba65d31a654
  • SHA512 68185dc182e17f80872b26a50d7f34be181671d7c6269fe046077231da7163d39bd0103933893eefb98b242b407e81ae4a2491163ffc446e7c826d82947fab90
  • SSDEEP 3072:EYO/ZMTFx9qo4TVGMspFXHVMDDFVyBPShCSSBp:EYMZMBx9qouZsHXGy5Sh
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2