Extracted

• • Target

    NEAS.692a63b81b65b897ec74222d796c0b80.exe

  • Size

    276KB

  • MD5

    692a63b81b65b897ec74222d796c0b80

  • SHA1

    b7a4b61ddf5bc6d5c394b7c9711301dda05ea664

  • SHA256

    e51d0b81ca8d23771538b6f9f787293c86fb78ad2d30fb09a57a9f8bc301dac7

  • SHA512

    e2ac0657abbd7aed771e4be35fc709e572d138b50f501ccae3f203baf63559dccdd65c0b3dc954de375aada412bf5e5c7bf843e3ded0784d957fd87bf9ab8fe8

  • SSDEEP

    6144:zD6cswHTGkIdf487tQi2iklho8Jixi0d:zNswzCj3kr1f0

  Score

  10^/10

  redline@oleh_psdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2