Extracted

• • Target
    3864c2ebe5a652f733b0d4d212ddf55a.exe
  • Size 194KB
  • SHA256 228e0afd4c4d2767a20c1e74fe28cb47b16bd41fe1127f4cdac28fba2535c8ba
  • MD5 3864c2ebe5a652f733b0d4d212ddf55a
  • SHA1 3e582fbc9406a6cbeb0225dd99a25b046ee86fce
  • SHA512 4bb0b69cf7c66a30d67323010f7e82ea70f81c6b1cbd08f5a1808065a46fb67a84894933bf217ae693b2574efcfb179a0357d071ae2eddb53aad35a4c926e1f3
  • SSDEEP 3072:qHVazp2oHfyhY2XwMZm2pM2pyqHH+adVljrXvlLm:gQ2VwMZmyppbV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@oleh_psdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2