Extracted

• • Target
    51fdcb672f4cf404d449b16ba022ed86.exe
  • Size 422KB
  • SHA256 6e1c4a1708e8e2ee40e95fb5fde40aed9ede85f5c04021b4b293ae44ef976dac
  • MD5 51fdcb672f4cf404d449b16ba022ed86
  • SHA1 d1c82bffd533e1d1cff60e9ae856fa14115eb980
  • SHA512 f4baad1547b2d715ebea03ddbf238cc0642a6083d7825398451f4e75eb0f89929715fd07a91fdae81fa9371b61b0f98f2b23081335af00303aefcd9cb1e098d1
  • SSDEEP 6144:lf/BqtmGNXJUzeceTVPv2c/biG9vTHWJamf/y:lXgJXWcPV/hKJpq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedebradiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2