Extracted

• • Target
    ee01e59d32d28796c1102c860e0392fe.exe
  • Size 378KB
  • SHA256 32ad550f5d96a9e8fce577e0337f16dfa50dcd680bb1d391efdd4cd646e8496d
  • MD5 ee01e59d32d28796c1102c860e0392fe
  • SHA1 72e670efc2595a75e1a5d2249142d64b5bc54283
  • SHA512 4ba7b041525e2befabc42fd41c3aa81236d5db7aa93d4c3a5e30c2b60d6bc036bad1f79d0fb362fa8267dde8907c3dd0d078049b25e5e1edf8ba56fdcc07eb90
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineinerinoeudiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2