Extracted

• • Target
    1f35d891cf93853d11c166ac59f66f8e.exe
  • Size 137KB
  • SHA256 e248d50df9fc8cc6ee14b6b703c623ca29019a673a5428f54851b085459e11b5
  • MD5 1f35d891cf93853d11c166ac59f66f8e
  • SHA1 58804865ccfd2b0c2a4275aa43824c501d39f70d
  • SHA512 e562a58154ed55a7a535c4061117447b3baad50d594092caf1cd518b1a12b5f0d66ebb1cbbfea518f4ad4223d70486e1fda6adf0dbdbe70f221fec7a79728e85
  • SSDEEP 3072:OYO/ZMTFh/+wY7DcNIc8xxs9999vlBWFJoRXYhISS85:OYMZMBh/jYkic/TNBYh
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealerupx

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2