Extracted

• • Target
    fa90a0d3eda74437273dd23d8e9ca8e8.exe
  • Size 304KB
  • SHA256 621606f23b6d2a7e300cc4785f35fe8235b60604fb2c988470bf8971b57360e2
  • MD5 fa90a0d3eda74437273dd23d8e9ca8e8
  • SHA1 6fcf6cfb3ce6daed7c13e9af899640c17b2e6b77
  • SHA512 76697009b21e0b06eba51989ab210e894e2a30fc32a701b19af0b226372ef09d2609ef3a360bfefdcc0131b449ae68d52ffd82bf7fab40b54882ea48be57912b
  • SSDEEP 6144:WryLl/t7LnStnj7AZYKoyjhrsu/bLwL6wvxlNlDrwTHlygs:WryhF7zSt3WoyjiuzLwL6GxlH3gHl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineromadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2