Extracted

• • Target

    1be014d414593a061836642ce7eaa4ae.exe

  • Size

    260KB

  • MD5

    1be014d414593a061836642ce7eaa4ae

  • SHA1

    389c5cf54314e50caf35ea8f603ff8cf1b7013a1

  • SHA256

    ec2ebe78e74c14e0c4501202df94bfe2a966ff560d367e37899b55a9305cc6ba

  • SHA512

    ace61890c426bbca89b4587a405f25b5ce6829a8970f69e852b44098047163e08ac139414b3a3470906b4a78c60875bd4730d7c82eeafc7bc82c4b11be01541a

  • SSDEEP

    3072:z0JUz8Kz6s3Y5IyTo3Zp7ix6tDmRB+Id7i9BO7enUMRjkvMt5:vH3YDQcx68Xd7i9BoeDAvM

  Score

  10^/10

  redline@lightzee361discoveryinfostealerspywarestealermicrosoftphishing

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Detected potential entity reuse from brand microsoft.

    phishingmicrosoft
  behavioral1behavioral2