Extracted

• • Target
    94ed76ccff08f28db75237bca81d6df1.exe
  • Size 334KB
  • SHA256 1bbc3bba2c8d25849015e5dbd94753aaa1c543f13c467173a3a5ab2477fc0c87
  • MD5 94ed76ccff08f28db75237bca81d6df1
  • SHA1 7e2491879b6764f9ca5f58eec1f8827e4a261427
  • SHA512 3b9666dbafbad8c5a97413a82215aee56ee48a23415f701c1593b09cb15829ea65d896bec4c7cb8c8c88f55b3154436e45209e79ecc7a0069730232a4b03583f
  • SSDEEP 6144:3Y/L6cgif3B70qjIVm+7xi/+DWccmFGenea0VZK0NyLJBvrjcbXF:3Y/G2Plo7A/SNcbPFk0M9BDYbXF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2