Extracted

• • Target
    0df07d9a1c5b4cad5166f63915452802.exe
  • Size 427KB
  • SHA256 20df2f3e5302aa0059965c6084d31e343e838426820038391b1d43a9fc35aca4
  • MD5 0df07d9a1c5b4cad5166f63915452802
  • SHA1 12bfab86ce41ad54389c58c2a580a7be673e6f27
  • SHA512 85431708f187448147bba9e33511a7a810310ae259cacd8136ab009064e35fad4f69eb71c10b98de22988b1a274ebda32f43c600d9e4e299a8f185e64f2337ca
  • SSDEEP 12288:m3b4IFSNP0u48ItCLl9OFWTcUhuCMZY7O++gb:mL4IF8P0u48It0saxpMK+q
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedebradiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2