Extracted

• • Target
    58579b788dbda123284f1d2981dd817b.exe
  • Size 306KB
  • SHA256 670ebc347dd7d79c1736cec1f2e8e517dfab7227f14dabbecbd7eda139642175
  • MD5 58579b788dbda123284f1d2981dd817b
  • SHA1 91fec1837c9d2d9b0b7b3b343ec77458516b032d
  • SHA512 8b4a4916fb0e1cba84839cb85e4d0e651475f4a776a0d7ad6d3484080d12332b0df6112c18066d8dd671e982dc53d2e00cc2f6cea5cd80515a62c967d1db0e80
  • SSDEEP 6144:1UJIYLW5oKfp2qm6YHtC7eE8Y/8pmrYh/0gwVrUErEaltd:1UJHyoKfpks7eEF8GeuxUE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineromadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2