Extracted

• • Target
    a5361650167413f415d66abb245b8557.exe
  • Size 292KB
  • SHA256 e9c489e19f7466eb5509102f0eabe682e0cdc835bdeb22fd2eaacb8742705767
  • MD5 a5361650167413f415d66abb245b8557
  • SHA1 6779fb5c0d20145525abc4e0d630d961951f1d6c
  • SHA512 a8a12e853bdc4125a8b6103b12d6af5e4537a5b149f513eacd868e7bf06b14f3606d9ffa7fb92fe9ab2cb26c016d012a3cebd9f4309936b7b5abc2b2fa028082
  • SSDEEP 6144:5LyMgOwJTCEozIBliYx2aKkwWScYIftIRO8NkBx:5+M4J+EMy4YMaKDWjYIFIRO8
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinerumadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2