Extracted

• • Target
    c8cbcf0023f86cde87d71c11035ea823.exe
  • Size 393KB
  • SHA256 cdfdc2becd5e3531a967dc8356ea89d087826f53e320c98bb569dcfed1b2cae5
  • MD5 c8cbcf0023f86cde87d71c11035ea823
  • SHA1 9258fff2b6b44d3d423d3859df5ece04711da35d
  • SHA512 d774544984f1ea0021cd9e7ad413c0446bd0dbb58c0c0cf838226e258309f2229a4a6d5d7ec8fa1e497feb99d08d518f8da26b6cdbf850a8c4b7f89b5ea38797
  • SSDEEP 6144:Kt2ZOGL0VVv9OYON3uFNHFvF/kq4Slk6N5uNQDsdRQRTS5N:Kt2ZOG4VVpON3uzF9/kIGQ4mW5
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinezaurdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2