Extracted

• • Target
    fb1bcdd0b75b125b6ed0c7bd88ff0821.exe
  • Size 272KB
  • SHA256 c656768d580da10ebec5cd4d211da1fb70a2e40be23dcd6897faf5070274dceb
  • MD5 fb1bcdd0b75b125b6ed0c7bd88ff0821
  • SHA1 4ec21de7641c4c3fdceeb86a7add0509f4ae947d
  • SHA512 96a379989451db27788bfec89feebaf01202462ec652988d58df6e3aee82c03c903ad6d446e3958f4c41d4539e11bceacd1e3cf7d21c868b8b4bae22c8619f40
  • SSDEEP 6144:ULJuR9cLAccSzLpvUkdGdF7Yc9QeeZ02EBWy:U4R9cWqL6Yy6m/eZ/m
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2