Extracted

• • Target
    cad110ca2f60ecd3c9c16e973b59d3f1.exe
  • Size 481KB
  • SHA256 4e6f291cfe31f835aa30b7df5078c5ecd6cd758104b8a8a8e40cbd7257ed6ba5
  • MD5 cad110ca2f60ecd3c9c16e973b59d3f1
  • SHA1 93c455fbd0f645c6cf56208eb34489f889866913
  • SHA512 3bf5bd8c9ce7f45d8c517e28df9bee44a4521d942ccfe44153ff8b4b1e55137e76c229a0a04c5b77a93ee13b397fd59883fec06ac81d93bb82645af6ee6af983
  • SSDEEP 6144:+wbRelJfN6Our+zezosQntff1DuFgqIbftdjJoSKMdkT/3uZt5:+w0ewenKtH1DSrwfrjsMdk
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineromikdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2