Extracted

• • Target
    ae81d0c154590286c5f9828ee564c51c.exe
  • Size 409KB
  • SHA256 3974a362e78341a13e78747c30cf901c007fb0bd3beca1f8162389d9ac486a21
  • MD5 ae81d0c154590286c5f9828ee564c51c
  • SHA1 d3197dd3dd26d73a64919da120b1195a770e0983
  • SHA512 ea29e52833bc873ece56a5d36d79255c05803845fa4d1d2dee0704c3875cb7a8f87344ded9228714418b168384fd7506d1c3017b1570155b85b8230bf507eea7
  • SSDEEP 6144:knLD2AeGKz5p0ouoH4aoEywGgMqyPdzyCJOTe1e9/CJTk637eQfnd5u8dWB5:an85moQaoEywdMqsBhOTj9CJb7d5Hd4
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinemilafdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2