Extracted

• • Target
    15471616a00a98c46563ae78e0e39f6c.exe
  • Size 351KB
  • SHA256 ae18ef500de766c88a9ed7f1da89fed136a4e235918dfaae0e74ee5d158a8928
  • MD5 15471616a00a98c46563ae78e0e39f6c
  • SHA1 e1cb0d24e3d98762918eccc3497efe09e6dbcd93
  • SHA512 77c469c2fb2a35306613cdf5058e5bae362502f3e2f1101420bd5234245b73987a56e89d1174c0c94d6a99274b4e382c24174efaa3120076b519c63fa4a0bccd
  • SSDEEP 6144:hMLmOvBjy4PigzxtahYDBYLe4cutpzKarSdZ0Fg3:hMyOLigP3WefMRVSdZo
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineronamdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2