Extracted

• • Target
    4786f469607fd300faaafba096d2c09f.exe
  • Size 334KB
  • SHA256 7a6aa35deed2fac5dcad730ab3591efb8f28a82312bf77d5b18a1b34381d9ffe
  • MD5 4786f469607fd300faaafba096d2c09f
  • SHA1 48360e75345b73d3f85c91b66417e791c8102507
  • SHA512 210e343ebfd90ec6b28119948d6d241138d2da1d043138b3b6dea215669ed97982a217d35538619db09c5fb0febcb59d6063a6ae697a7bdd0d455b4b71ba738a
  • SSDEEP 6144:Ug9O9/oO0Nk8sG7oB3OFed8MrA/eq5CiRAY:Ueo/ofa8sG7oNOY9kYiR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@privatediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2