Extracted

• • Target

    CutorUPDated.exe

  • Size

    493KB

  • MD5

    07d15974cd8ee4331b4df426ad1146b6

  • SHA1

    a597b1d0e85bbb4dde32ed4a6106ef27f747fd96

  • SHA256

    d54ae69768c264166dc63e23367eb493cd879d61765d057d5840098de4749eba

  • SHA512

    47944b04701b63f06f2a78574dd41dc316b64895b0ce9747e05e45ce8a3f52a7f39f26bd8408a2f841d5a6fafc64288f32e1467ad21d166987d06def606a7727

  • SSDEEP

    6144:gylYHzRoKNDhsIdRYqQZDXNlUbVwqchGUUkVwTER1IBbJAG6oq1zBnvQdB9JnNUC:+HFoKN2rqZUpADb6G6ZXQHvNUC

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1