Extracted

• • Target
    cfc8992628adcebf10459fb2ce831d7b.exe
  • Size 400KB
  • SHA256 2ccd00bb39e5de1ef3e98f03bd3fce7439b64a85351702e44e6e5c49c7de8c90
  • MD5 cfc8992628adcebf10459fb2ce831d7b
  • SHA1 a11a9b2fcc677d0cb99fd1f6176a01ff15b6c976
  • SHA512 20fe5efcbfa0d16b4eff2adb8726ea985a03aeae303c0552d14f1c578e3ed96b80d60a483e741bdd43adbc755a0cdaaebf236964bcd87a5f4f07abd6430c6eab
  • SSDEEP 6144:M/LUzsQ8EF2V+GT3gPXzbkikWuoof+bwH0BJ:M/QzstEF2kGT3gzb4WuFf+bgS
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinerambodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2