Extracted

• • Target
    c95d4424ba5f463f0fbf7df29ca81a81.exe
  • Size 335KB
  • SHA256 64f7be0ab22aae09ddffdb165c24cf384e64fcc88db11bbe1db755eb66877e53
  • MD5 c95d4424ba5f463f0fbf7df29ca81a81
  • SHA1 5ed5ab16de078139c177165bafb3e192978a8f88
  • SHA512 5aea494f2d952a39c59aa3bcc143127d9de41f2687c6a60bb13654684b2a2500bbf61a00f75cd2cfaf8f63e37b54395b68d10cc05503050c68c0b19436f5fc35
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesomediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2