Extracted

• • Target
    f077964f3c430cee3839f32974e81e49.exe
  • Size 221KB
  • SHA256 dc75376227ae93c1fffb43340a669b80e9bf22f2e101721475d8077a4d4ac0f6
  • MD5 f077964f3c430cee3839f32974e81e49
  • SHA1 18e5577f17c587baa7662f921a8311e4fd54e096
  • SHA512 7518f743dbc2851e098467fe46a6a9f05a13cb6abf229a330db849f3f987222c6c1ac898577123d5b38f07503c3a7cc6d481638ae60718a6d327203a8174b004
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineutsdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2