Extracted

• • Target
    e74993daa9c0dc6e2cf47f944bb23c80.exe
  • Size 408KB
  • SHA256 a4b84e177edb2a3bc5755d3a1f88595d8b830f88377aa6f91f296b1b59b6aebe
  • MD5 e74993daa9c0dc6e2cf47f944bb23c80
  • SHA1 20baf6fc84ec7a340d769b520367d18c60cee9a1
  • SHA512 a278ce3c8e55b5d44acfe0b746b7accb09c70b453e42b8a4fc50a0a09cf187942b09b1bf5b52649f4297dd84d205926a0ddde97ca4a203609048b9e28d88c1a8
  • SSDEEP 6144:IALYIqypOh2iD/OH1fL2xjnQpZsWkyfI9/CJTk637eQfnd5U8aWB:9EjN2HxL6TQpZpkyfI9CJb7d5W
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinemilafdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2