Extracted

• • Target
    e0e8c025a370303c6b52ffd0904918ff22eadf74ae24e.exe
  • Size 408KB
  • SHA256 e0e8c025a370303c6b52ffd0904918ff22eadf74ae24e8bba8149491c4ad0ae2
  • MD5 2d2fdec36c8527bf8a94950d6a051cb4
  • SHA1 22635c69a49faead50ea0a50e7ca096239574e5f
  • SHA512 de174e46f67c2b129c68c18423055cd30f32a48c40de91e4968dbaef2358387d23cb337abcad87ddbccbd0b303c57be3cdcedd4488a561a20c6daa73575b65fc
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline0320discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2