Extracted

• • Target
    267aba9a135b0d350fcb79624ac2904c.exe
  • Size 335KB
  • SHA256 eeacb2599b7e2a2cae190aefd594780c6c2f397e6f56a5df4990088a37e7d29a
  • MD5 267aba9a135b0d350fcb79624ac2904c
  • SHA1 35fa18612c21a34b7d5a71ffe1a630e8881a5349
  • SHA512 ab0d4c81735647847348035f92cfb26882c5bebf5ae20e6fbd719ae20f92335c6ef55ac26e63736950fb226f5511b96f755a7db33307d717422225d8997594f1
  • SSDEEP 6144:EapLJ0PAtBu+WxZ49izA21u5oJ6hoFl2Pn1ygQICa:EapF0EA+WocE21uuMk8Pn0gl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinetruddiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2