Extracted

• • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqblFRblhBLUtadzVBeWY3M0JiOTZWSTh6VHE4d3xBQ3Jtc0trdldITGtMSVhJV252RUlFR0E0Mm9aZEpLUVV5RzVLcWJXV0YwZDE5N1FVR0lpTTVjY0FsanpJQVVKVVFQOEViWmpHdFJnQnZiWktBX2tRZHl4aVhoQV9mWmd4d2pyT256MGMzcGFuT3dPMFVxOUhlTQ&q=https%3A%2F%2Fwww.mediafire.com%2Ffolder%2F73lizwn9j9n16%2FEwIn%282&v=--J_steGUnI

  Score

  10^/10

  redlinecredential_accessdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1