Extracted

• • Target
    2b66fb2a33cb1a50663265c68f0c31f4.exe
  • Size 413KB
  • SHA256 328855c1c07f40f2292febe7aa13effb66d7eb328baf30981acb54876030443e
  • MD5 2b66fb2a33cb1a50663265c68f0c31f4
  • SHA1 3ece8172ee925a583aa4fee7d0b3b903cff091bd
  • SHA512 840d4171fff2b99f74d4e24353eec6dfc86728b5bd5cff257b3f889105aa33971d4f1f549e816fe54c9f7e4d0b7b9820bb86594ee3d08d45fa0b6562ea44227e
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineredlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2