Extracted

• • Target
    cd26d1159f20d37cca1aa22af82cf6a3.exe
  • Size 309KB
  • SHA256 5d7e056cab62d45da796272f782b92fdba8c38827e678fa1273c0ccb71aa6d83
  • MD5 cd26d1159f20d37cca1aa22af82cf6a3
  • SHA1 f24612e9ae118b4a885c3983022d33da0009a70a
  • SHA512 171da49fd4d34e07bd50c46f27b08d1fb96f4d65706fee68ac76c7ab068c89cefa0a97034b4d8a2bc326174ead329a009ad94993d782e2bf5e3e291f7a32d515
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinezalivdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2