Extracted

• • Target
    3570cfa79638c148588f3f22a7ad58c9.exe
  • Size 360KB
  • SHA256 5b82bbf81826faa8e2ff41c468af4632d3151eabec01e5535d9a7c4659528c51
  • MD5 3570cfa79638c148588f3f22a7ad58c9
  • SHA1 205fcd2a3a45d91ee1bdbaf820f49967539e0159
  • SHA512 2dba3f1abfea0fe86fbf9581953528b02e88f96f45d2a22092bbc5d3922cb7540843d61758b3ee10dd57af70b38119dbfd1868df6d910562f607ed99f328144a
  • SSDEEP 6144:tJhbp5Iy4wUHkjT/eASp1+7lvoe/YuasdHQO33JnTyIuHOn4ssEFZIQ3uSwsZ5jY:vhf+DMTmASP+uewuasdHQO33JnTyIuHZ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2