Extracted

• • Target
    2df3e34563c2bfe98bde42b4d6cccfc3.exe
  • Size 364KB
  • SHA256 6bc48e17360281d3d5ad012b7c99e0fbabb97cf136695b52f045cf806fd62e77
  • MD5 2df3e34563c2bfe98bde42b4d6cccfc3
  • SHA1 e4ab6f7082a3c75b395365fa5ce5049e5b66621a
  • SHA512 32fec925c3058f15ae017ca6568ca5c5b84ce5c09f333d96cb291dcf707f87d03b533a385b7af49c9dd7f0ce674f14c582f38441d786ec38c887ab46fedba100
  • SSDEEP 6144:ULVFIHgPQ7pbUwxklIlUeyCCVG7iDtmmUXT:URmHYQ7aO5y7VsiDtmtT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesportdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2