Extracted

• • Target

    qu8401.exe

  • Size

    366KB

  • MD5

    b949a30018b5cd5a9162a52e32ce008e

  • SHA1

    24b630854436711740f5f0db82aea3f116f47ab9

  • SHA256

    800642d5c4732fab640635f3e0220f6bc61854dab394f31f347f85b065155c8d

  • SHA512

    9188796e10c346a06ad046fee805c7c2bc981f5d2b1b2358c8ec4cdb048d1e6fe9bc370a4e84a3129fbfcc6d1bfbf130801b9884b8fe242f107d9137591794ac

  • SSDEEP

    6144:elaiuvuXLjp25/ZAwMVCdvQySCXVUi8J+eklmKYuKN:AsGXHp25BHBvPSCXVUDJPa

  Score

  10^/10

  redlinerosndiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2