Extracted

• • Target

    Crеаmіnstallеr.exe

  • Size

    479KB

  • MD5

    f99e722c556c5abe19eead89f91f6d7d

  • SHA1

    412e7dc408ecc8a0214bdb8a8140f62a8f9813a1

  • SHA256

    3d8728a098774435a2ea6396f723a71c372cdaa35da88ecbd82966c3e745a4ba

  • SHA512

    cef8fa961a2a4c385ef025635d89871dba28b6a81af768ce3ab5f078975e7978b5e418031160351af6e588d3598ec5d6eb5f1e021b787dd584d5384296e9378f

  • SSDEEP

    6144:p4HECUR9N+QpzwzQZTndZrfGighwlxtym6dEBSxkvW5PPnHEodLy9nM:sECURv+2jhlEhwlxtvIkO9E79M

  Score

  10^/10

  redline@voidltttdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2