Extracted

• • Target
    78fefbefb0d648c24aefb72e6435e7ab.exe
  • Size 307KB
  • SHA256 0e5a2fe272129c522049bdd7a506d754826d8342ea7cfe1c1a3c23c81a2d17e4
  • MD5 78fefbefb0d648c24aefb72e6435e7ab
  • SHA1 9abfdeee785eb7458ab3e7384738f4c52ff141ff
  • SHA512 ea4663c5e28f4a0d63a631234da0a84765232855e11c5eb3a4bc1aeb6d1c1a8c3867318c06c28767e553cf52db3ead5cb93e6ebf3f344eb4f8245e02579f7b6f
  • SSDEEP 6144:yjSTPLmXcqXTGRzjTM0xqla/KGNIr1HjZ7t4tuB:yjSTPSXFCUkDylct
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineromadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2