Extracted

• • Target

    0e598ae27453b8349302a232a8fa3c8d.exe

  • Size

    380KB

  • MD5

    0e598ae27453b8349302a232a8fa3c8d

  • SHA1

    c314d820ba348ec2a155a2fb1d177af33d36d0be

  • SHA256

    2ea0bdd6a345b67435ffb4208a1fd0d05057a590cf2030e6b49887815ae6dc44

  • SHA512

    918c6c5c7ba2b177f0c837a37e793bfbb7baa34d330a64dfb3497571cb58b9475e5ef222b189df01f06adeec1664164245ed96e01a926021f4432fa109e7d7ec

  • SSDEEP

    6144:FwX8LaJrZVRMbVLFOvJw0rbeEbPmGO6XSP5liYopP4eUM:2suJrXRMbVwSubD+lkUM

  Score

  10^/10

  redlinefuddiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2