Extracted

• • Target
    80d9ecedf87bd16cf1e50da9d1ea00c8.exe
  • Size 333KB
  • SHA256 c8724d7d7c8e9c054c52905cc8469d87f4e8d16bdc1a013a8ea983690e43a2ca
  • MD5 80d9ecedf87bd16cf1e50da9d1ea00c8
  • SHA1 39dc2805555753460d91042f0e0173d65cbcfda1
  • SHA512 2c5cfb759c2809e9809a9ecfb673b55b2a14de38484171c4a489b3ebf02bf74f7ff2089576bd78d27c7068f9f3c45fc45d9ef88f3d7875948b568b796b7a2bee
  • SSDEEP 6144:w+KIL/j6lW+ifJBTI5q+dWre3Xvkd9uMNv0Pn0oRueuS:w+Bbj6lWPJBaq5UC9b6ffN
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinetestingdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2