Extracted

• • Target
    SecuriteInfo.com.W32.AIDetect.malware1.29752.6601
  • Size 333KB
  • SHA256 d54ac4512ec628667e1824e1369727de79f9498dcd00bf7d0f83d9e13b5f39eb
  • MD5 3293499251f2d23bed2f9a86732f766c
  • SHA1 9a927290113c2085d14c807f3a08c504f022d766
  • SHA512 b0c3927318c69070f266873e2fe10b51c248cc9936d0b49f8f39bae67c84393c29f4968d00d3a5003f33b475a3269251ebf2b6891052398f6fce45575a29b160
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesomediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2