Extracted

• • Target
    2c2ac166f34d31c8fb1a0b3785a2e2ea.exe
  • Size 278KB
  • SHA256 f0de95ce126151d1ea32a246ca91789a0efaa766f4dea18bc294301f0bbd36e7
  • MD5 2c2ac166f34d31c8fb1a0b3785a2e2ea
  • SHA1 2c4b9c22c69094530286bba47d5038cd296bf957
  • SHA512 1ccab8003824282f847eee2dd17edd64a7f5ba4294635971b244a023542b30477d258ea440a2ad0595fd7b2bc99cb5f9e7c9c07e8dc62d3677b3efc7cf68c63d
  • SSDEEP 6144:jCeUCHdhLPcwsaLL5hWRnrp6qOqpHGAc0Of:jCk9hjczqL5hYp+Y1X
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineronamdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2