Extracted

• • Target
    8ad652bf62ce0c2a11208f8d350e9eaa.exe
  • Size 333KB
  • SHA256 2fff9ea3a4fc0cbe35b454161c92d2a98bc09f977e3cf427ef70ca8e96244e6a
  • MD5 8ad652bf62ce0c2a11208f8d350e9eaa
  • SHA1 6154fbf8c3dec8b5cdee3f38932e04dd897286e9
  • SHA512 26de7f93e32b685b82b43c793481e4269e56ce8f50bcadc5635365bea3166f8de798378122107df613298b045b66e1489e2a4d3102130eab6786a748127311f0
  • SSDEEP 6144:s5MO3NL+qAppUWKMHldg2wuotN2Ee2wF8LQYDOPRSZvvjCFX6DHXyUC:s5MCKPpsN2wX2OwF8LvXvcsi
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedebradiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2