Extracted

• • Target
    00c7189dd829df9c5f3ddf73a3c16ed9.exe
  • Size 278KB
  • SHA256 bfce4ceceb39988f6fa4e9b498673ccc20f6e9b9ad4a803ec38fbfd6bebaf12e
  • MD5 00c7189dd829df9c5f3ddf73a3c16ed9
  • SHA1 91ba7f7f77fa3b9bb6e6af47c304110cec7fca20
  • SHA512 5365b34b50ec5e1450a398600ae645ac543e32f5a61a89974c94e261bc2eb9a8179a7fdbb7fdd5582fdfee314b88fc28170f1b4a969232473f57f84ea1aeec57
  • SSDEEP 6144:8hsLwA/Y277b+kzXJ4qMkH6vwJMRCGtKIRGh:SsUA/TLhR+RCGtKIR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2