Extracted

• • Target
    212ede0ff90d99a1703bf5b407c142df.exe
  • Size 322KB
  • SHA256 eb23b33b3c01b0bc19855795d7715ee1e6d291b9cebc551ea7c06c2404185cbb
  • MD5 212ede0ff90d99a1703bf5b407c142df
  • SHA1 9b87a941b82328fb0428a243df677db91417124b
  • SHA512 9f14598ad5e31d0278520a08fd3b53fc052d7a43a15462c7bcd2570edf12cf4a5c4c7d95fa01c5eb032ddd3bb4fc819c57585de5d8ceb1562f4710918f61efa6
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinetriplesbanksdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2