Extracted

• • Target
    94d08c64206e2e7b407f16fd7c62ee63.exe
  • Size 445KB
  • SHA256 ebc052ea936b31dbde5f38163c6ba2912227b90e285c036d1a910dfcae96524e
  • MD5 94d08c64206e2e7b407f16fd7c62ee63
  • SHA1 f9e9f1926d27cee6c6798fa58f973d2fb8e4e900
  • SHA512 cf91d66fcfb9684f8bfc65ac8656aa3dbfc0ff8dade38f7b0f939390f1188117f0ea0883151c9bbff1a06fe38a2e5de483bc5c17d94cb21841e963b1d771b1f0
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline50reddiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2