Extracted

• • Target

    Installer.exe

  • Size

    1.4MB

  • MD5

    7eaaaa8fcc415db545f4cde72ad083c0

  • SHA1

    9d294d1f61147dfe82cb30d8b6aa4c978ed3a609

  • SHA256

    a105ae6db94ceb063d8e0019207bd08642d3d434a8217e3fe833b020bd6e6170

  • SHA512

    cfff393947a65ba9f043bfbbddbeb4d2c4e8289a561f65f25c0294f7aa36367782b163ad9b19fe407beb2bfd9aec019b5cdb9293228552fc7a2a857316b774d5

  • SSDEEP

    24576:byeIaZhac1XXDN0rKOWN8O3b0/3GhiIAzPU:b6StnDN0rKOWN8O3b0/3GhiIAzP

  Score

  10^/10

  discoveryredlinecredential_accessinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Loads dropped DLL

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware
  behavioral1behavioral2