Extracted

• • Target
    fab167cff7c87ba44d09e24cc2903488.exe
  • Size 399KB
  • SHA256 4de0ff38dd1f37e819e40d7658d28bed7a9a2f1574c696574b82eaab6b8716ce
  • MD5 fab167cff7c87ba44d09e24cc2903488
  • SHA1 c21c01efa1ab81431c9a211881b6c5060004e7d4
  • SHA512 af8258c0b8c3f5f0d3dab3dff3d4e7c586b353317dea7d998188147ca83bdc5e1399d2dc6107ae0d6bfcf506dafc55ab86152ffb628b132d734c2813dc1bd77f
  • SSDEEP 6144:czPL39sY3baWbNTb3xtUqZ/DaBiA9Qz45k9/CJTk637eQfnd5cicaqB+:IPz9hTb3xhjAk59CJb7d51c6
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinemilafdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2