Extracted

• • Target
    cafb708d0e498080e9e59e09762c355e.exe
  • Size 404KB
  • SHA256 620334f914c5d28025c674d44aa5143fbdfd94e4eb9de525694362172177b13e
  • MD5 cafb708d0e498080e9e59e09762c355e
  • SHA1 754579e2c9de2d6b0dd1d9cec18c3a0bf72774c4
  • SHA512 c000c71c8eabbb29cc5239f909188f213c5da7b4fe8e25f2102fd8be60c5944409b09ac5ab87cd2a9f5a69f0fce0d7109ff389aea536044eb3dce135554ae459
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinemtadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2