Extracted

• • Target

    fe5d827752446c287c581f1c20b559f66b477e98ddf453d3fbaeeb6419aa792d.exe

  • Size

    219KB

  • MD5

    d8d88d5850ac88aa2069cdeb0a232a89

  • SHA1

    d361fd111d2a5145670a5f8739915f2786cb111a

  • SHA256

    fe5d827752446c287c581f1c20b559f66b477e98ddf453d3fbaeeb6419aa792d

  • SHA512

    2fef4034ba2beadc5a84b5c1163dd58ed2f583a910b4511dd9437fe2c1e2c27639771642386437b53aecfc57c8375b905eae3dbb835ba8ae969d7727e65ffd11

  • SSDEEP

    3072:6693FTitU7pNgcAfimrHV7+9IWQ8ARSdhs1Sc9eOCd4NpKSo:669V+tU7pNgcARrHV040vs1SstCd4Nk

  Score

  10^/10

  redlinesq3discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2