Extracted

• • Target
    e19afdc0062f42d031a99264ea1278de.exe
  • Size 250KB
  • SHA256 9ee5527478df3c28ca41fbee2f0d0d5d127653d7f25d799f8c27f18331d040e5
  • MD5 e19afdc0062f42d031a99264ea1278de
  • SHA1 bfbf8f979f37d29d85348f66896b8fc2bafb7f71
  • SHA512 d977a827abec6eaa6938d97468a5aa1e432af46b707ec1bbc5710fc79b3a8a6c97aa40ba7ab8f01873e6b0017a36bb7a24340f9a40dc2491197a1fa5cc4b2f6b
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepubdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2