Extracted

• • Target
    e4da67e0a0e594826549e34016967cc9.exe
  • Size 352KB
  • SHA256 ebc99f23d2b63ae33e4d7d5324d25c5967e6ce26e35f12a841114ba89728a28b
  • MD5 e4da67e0a0e594826549e34016967cc9
  • SHA1 3a0aa11e90d01dd9d9a95b159b99afad79a79310
  • SHA512 967ff61c47b5f3ccb41aa6a9fa1dc95794b46c2296762bee6e8934c7913446d14e125d476198f63818d93c49eabb264caef847bb2e8e22e0f842be604a8f7381
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineusacashdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2