Extracted

• • Target
    a73edc5e9a789f2819677cf53dee7bba.exe
  • Size 300KB
  • SHA256 d8e4ee9b8049923e2c996216c5718b3ff0913c4b6b3d6461ad91fafebcde733c
  • MD5 a73edc5e9a789f2819677cf53dee7bba
  • SHA1 12e00c9ca8d4f19a9af341d914dd5f923be3fee7
  • SHA512 3bb55e7b1e5077c27e058fae05245567332c940ca7d30a673fb76c973cee9d7882fd24c680a708b933e170c508593b89dc2c03789e1c78b735e89744bb183d16
  • SSDEEP 3072:B2KLTnYEQwKvxLrAm0FN+q2pGuhTMo1syKXLn6yujgrxphaAykPMRqT6Dv/Yieqp:IKm0/2gST98wjUxpQA9PMRqT6D4wL
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelegendarydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2