Extracted

• • Target

    f2021905fccfb19a7bf42d92361cc9a1.exe

  • Size

    175KB

  • MD5

    f2021905fccfb19a7bf42d92361cc9a1

  • SHA1

    00bdae4de3daf0d8af6735c5c480079940dda9e1

  • SHA256

    a7b2814efdf0b1f62accf5214afda7866bf5a2d35056f2fd759bc0d85a291c71

  • SHA512

    7f0dfc8638b0bdfc928ab43ad10c933747b68685e0c7780dc361a5df08322c90c72eef174f65eecfaf6d9f387b71afdf60222cc192141ececa4789cca5bd3737

  • SSDEEP

    3072:J9xqZWBJaHEDgXQn79HuUUoeqQF7hBbxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUwm:JHqZVyJRUZ7h

  Score

  10^/10

  redlinesportdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2