Extracted

• • Target
    ec0c7c2ce156617357b27c12c55df977.exe
  • Size 293KB
  • SHA256 a8fb13aef5dafccbee2d454155197e472fa8b7f31a2a9fde7038e65785d603ea
  • MD5 ec0c7c2ce156617357b27c12c55df977
  • SHA1 ee3e38afc5679a67c96eef302f7dd62ffc5b2aff
  • SHA512 88a1d0f87318cd396b2483b5c679bfc34cdd1ab028ec0cd4098940cf03fff7e484e367b47cbe05e599e9ec5267f628dadbc0bb067af8fd9cf698501214acfd29
  • SSDEEP 6144:4RLvGot57fS3hhmMmdFpTgiy5Kes3YHT19+V:4RrGM7fqgMmbp0LEe+Cr
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinerumadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2