Extracted

• • Target

    79f592f2efffab0491ee1b9841542052.exe

  • Size

    399KB

  • MD5

    79f592f2efffab0491ee1b9841542052

  • SHA1

    347f0083d70e9561e17b3041ec4c6426f744452b

  • SHA256

    48aff3ca7986edc6be811d56c88492f23dc3eeb8eeb10502a78500dc797e1bcc

  • SHA512

    76dfdfa9bef1d63683d60497af74410210fb7ddd0d6332105987f051cf8b472f544a3c85f795cb51fca5f7c2e85259b3ce7850e7fdece4bbec67a05e6fe3af5c

  • SSDEEP

    6144:BiNLZPm+SsIjECaz+cgj+aOE3x/8SZbRQwZDA7DEEuQj9AhI1kPa:4NtxS3jECsPSEStRlZDAtlj+xP

  Score

  10^/10

  redlineromadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2