Extracted

• • Target

    e698bb5976d0cb81dfa0dc89a95a825a.exe

  • Size

    381KB

  • MD5

    e698bb5976d0cb81dfa0dc89a95a825a

  • SHA1

    b218cc48fbea36f3c991659c858cb768a539e264

  • SHA256

    372db1c46c51528dda1e2e6b8a7896a0f374ef5caa6df5b0877f9c18d54aef61

  • SHA512

    df5a853545edc833e8c34ce30ed359ccffc560f67f18ea8c02d540b914de26828694f6f3349c2eefd0b154cd4ba51802e08095826f171ce406fc3e5ef1ec3870

  • SSDEEP

    6144:MGh1LStLtDAvqnd+ij/ui1yk0dCsi8lMWfZoQQJ9BIYGqTZmXjUF:RXmtLEq7jjoi8lvZk1bVX

  Score

  10^/10

  redlinemangodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2