Extracted

• • Target
    SecuriteInfo.com.Win32.TrojanX-gen.8765.4069.exe
  • Size 334KB
  • SHA256 2092daee7f4e0137f6295f3a4c8c4e159a5b5ab2da70d51c89ffe83a41d2a6a7
  • MD5 e0b75df6a7bb685a583f660b432412b3
  • SHA1 724c076622a94c9b836981570dfe9fc9cd58557e
  • SHA512 f5064d28e7e803c1e2b25883b048171e0ea889daac21461d88caacb11cdeb97b46b0f2055ecb6224e10b48762b879f67b834a0bb4f47a39ff71a3a5238a56c4c
  • SSDEEP 6144:9bgQsy6LA1PHGHweck3o8WcEQd+a6tMcmNx9eSNske:9bK9IPHGGkWQstWYSe
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2