Extracted

• • Target
    a2013cfe8484dbf0ff43dda5fa838bec.exe
  • Size 398KB
  • SHA256 e2f75ca08fa958f8a4fa25f2e0e76cf63f6af45bcff1166fa67f4b2e561f9bbb
  • MD5 a2013cfe8484dbf0ff43dda5fa838bec
  • SHA1 7e64a56daeae7a52fbca2f03bef2274af7b8c957
  • SHA512 75733f85e01f7c06a6879bf84910def06719acc930789f4fcd55707a5aa9019fefb2a5bf4ec1a0ab0d8133a2d46887f89296b887338d1a82ccac1254f085d4de
  • SSDEEP 6144:wIgxHtB8mOQzCA+7Z8EdYM6gkEGwDb98QzTy16XJ:w3NB8mBB+F8EdYbqb2AJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2