Extracted

• • Target
    7dadca3d04f18e4673d1a8e8aaff0561.exe
  • Size 358KB
  • SHA256 f1a569c0cacca1b3440f4cc2f22898a032c52c92245d9059be57e336510fdb5e
  • MD5 7dadca3d04f18e4673d1a8e8aaff0561
  • SHA1 766d5ee945b32db1a982311a6f34dd11383d17e4
  • SHA512 ee8301d7a67dca208ff6b1397730cc3e42c82388929e86444279c69da9227a8c16cce0abda4752b4b0e2b7969fe879e3283f27c525871c1b450e27d0791cf27a
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinepaladindiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2