Extracted

• • Target
    SecuriteInfo.com.W32.AIDetect.malware1.21724.10960
  • Size 335KB
  • SHA256 1fbca5ddbb713f65fd342549a0362955018aabfe2f880270b7f7980ce2f5b423
  • MD5 82730cd49a44ea08d2cd2f4c83275190
  • SHA1 2e0d2ced1864837f9cdbf16348675c89fcb46222
  • SHA512 31da26cc3916cb5c482c1d3278dbfdcf33ef742ad3b0be4d3f960aba0177461064b1a30bb777f990fad3dd03a96755383db459358b5f6f148fc615efdcc616b1
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesomeunikdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2