Extracted

• • Target
    1a27eca252ac0acfe41a6ed71d0ef78f.exe
  • Size 426KB
  • SHA256 f64fe7e3b268fe91d619c385ca88fa17e0c9b6fe431b2e1f229bb232084154ac
  • MD5 1a27eca252ac0acfe41a6ed71d0ef78f
  • SHA1 e951fb3f71436e4cb1074958b169c2705da93940
  • SHA512 9c714b1d40e1b957628c0728e6f17f227f109835328795e924695ccf5707ece077e38b3c7f4c379b3eedb8fa3f92576d898aa0cb923aac11b2255f96e29c2c57
  • SSDEEP 6144:FZblkan5kX1xaQkdhUK+POTis5h4u/6jnWYA088IQTHPl/Lmf/W:FZbqCWFxaQghRTz74u/6j1A0tpx6
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedebradiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2