Extracted

• • Target
    00819499e555a62f4e0b0790dd5c5565.exe
  • Size 420KB
  • SHA256 c96f914dd24ba81952c578e08d3d3e84bfe2c5ed63dc563ca0befcf672528ae6
  • MD5 00819499e555a62f4e0b0790dd5c5565
  • SHA1 4a25d7ec93bc262b4bd8ee172e870c7e9bb53756
  • SHA512 4bae2f3fd87d42e17358d986b6544da62763fbb872d9a2261f80901678a247554b9439f0f6d74cfe4ec98ecba00e68246adeeb6b710b62588dcfd09a5c44e150
  • SSDEEP 6144:QrVIkrWazXXRZ3tunMXV6mbTuV4NIj6qH/elH999wv0tWX0RwwVfgC:Q/SaTXXwnMdbaSNO67JdZ/Rk
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline2dwrkdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2