Extracted

• • Target
    9d2ece9bae37548f0be58d711f977647.exe
  • Size 293KB
  • SHA256 f694dfbcdf1d702da1ac259657feee06e660643ac3b2618afb6623eb7a548303
  • MD5 9d2ece9bae37548f0be58d711f977647
  • SHA1 db356b94934548dc49d0d3027cf361186e723283
  • SHA512 8bc59b70201014220ae17810f455e70cd942acd26f152529d02e29e2476a90fd6d6153815ddf2775d0036e0ceadde36b959823aecb29f2b1b23bf2d384e2bdf3
  • SSDEEP 6144:t1LPGcYwBDYoWxghVHRAkhUrOlb6TyKOOaH7JNS/y5TBV:j7GcWxghVxvxblKOOMDSMj
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinerumadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2