Extracted

• • Target
    1336289dfa1d6ae5ea388d7f0e71560c.exe
  • Size 414KB
  • SHA256 8687cbc1af069ebeaa71e1d86f3c0aff3460964a5d8d216dc3971451130ecc31
  • MD5 1336289dfa1d6ae5ea388d7f0e71560c
  • SHA1 79cacd2dc45004787d58663727832a9382b2a779
  • SHA512 e4051c6cb5f854fd40c1935ea7e2b762d9a78755c727c08722a27163a446de76c766238f3eb6f6ba38837d0bb44bbb6bfd555faa317d26cd5c0a2b3969c2d95b
  • SSDEEP 6144:jHUeckvq2iG8mIQSw8uo/5uF8iBBtKnZv2TKsU6H0lqigavwVfyM:jHUedS2iG1SwMRuF8iFKZiItlv9M
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline20220916discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2