Extracted

• • Target
    acd3a99ab8fad700be10c295a41f0dc2a43a3527f1390.exe
  • Size 489KB
  • SHA256 acd3a99ab8fad700be10c295a41f0dc2a43a3527f1390741d2fd22d5570854f2
  • MD5 631467e4c6d160b1e2ba59671d37677e
  • SHA1 d0effc70d9294f31f5eeeaf5f6c23d0fbece52a3
  • SHA512 2ca2ff127719925903f48928e1798bf0b5c9f6314afac5d475ebb0efdb61ac4305205f2ce74b0d297ba8d93b05275070b4afe8075e9f708010e50ae118142783
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinemixtopdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2