Extracted

• • Target
    526df2c198ad261ce30d6547d3cbebb7.exe
  • Size 334KB
  • SHA256 bfbf00babd2e290c90e2b17596a15d5f52fca7c43ad8d4691c7c4573d50615b0
  • MD5 526df2c198ad261ce30d6547d3cbebb7
  • SHA1 9e1c6d68bfa2d04c6cdb06910fe9c1a86de3ba93
  • SHA512 098cebfecb4013bd74e85dc2fc9b6e09242b2db73cc1e2d6ccd1276402cae18182616012a2dc177f091079d930a7ccb481855741cdff6107a9fb875b2c7fa444
  • SSDEEP 6144:j8L2tLW4abbFbsC33oA4SnH2Tnt+jgEW9M147S+mGhojlVklPH:j8iFLDC33oTSH2zojgEgjS5llU
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2