Extracted

• • Target
    b99a892233b109bfd07d34988eb0dd62.exe
  • Size 340KB
  • SHA256 1fc1cd4294d1ada2d5b9749125ac1c8fff4fd65d25b59ea9590e9f8545a02f77
  • MD5 b99a892233b109bfd07d34988eb0dd62
  • SHA1 79f876e6e54319f531edbe00ed2366a5277e8e60
  • SHA512 d4f4688f5a1018fad6534021bbfc225cf946a01ecf9186f818ddde7df5ecfd0460a7a8122a4d6fc7bcbcf9e4d7ff065360a3ed65ab9ac5e3b00532be02eb77d8
  • SSDEEP 6144:XLgRd+PzuaWkhWe7x2ojELz49eUzxwJ/6yGymI:XQ4zuaWkhWqGz4vxwVVm
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinetruddiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2