Extracted

• • Target

    2cedad17b383df15071a46bcb9ea2208.exe

  • Size

    3.5MB

  • MD5

    2cedad17b383df15071a46bcb9ea2208

  • SHA1

    6c491a3e80bf2f65531791d2ebc12ec29672f61f

  • SHA256

    a029e576a5d5202edce39308cd8f90b9594fd832be3546deaddaf21ea51653d4

  • SHA512

    0e3e56c3478594831640c6f0e5dbae6d7fad48b674cecfbbb8026b025904870251a466e8e24f3a1590e0960f5e8ef797404cbec7959271ff0387be465f4aee3c

  • SSDEEP

    98304:sp+QBdpsU3FuIPELrDb/50L+t1GXr7xnmYeb03S9L3:SJdj3oIcLbCqtudzbCx3

  Score

  10^/10

  redline5637482599discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2