Extracted

• • Target
    e002b3119071c614441fcb933afa2deb.exe
  • Size 422KB
  • SHA256 6985cf21dddfea3de38364fc0916058b3a051e8a8c2b513ba4457f8f127909ae
  • MD5 e002b3119071c614441fcb933afa2deb
  • SHA1 a34b5722cf66fb2ddccec407a6a3cd06c89ba8cd
  • SHA512 ccaa75c2f21279fc338a61ccdd8903dc53fb372870fed0392315f5de59a227dd32d88aa9eefff645f2ed72ca13ac17f111ff229b806e9050c8621080d947025d
  • SSDEEP 6144:EfGr4bJsq4Jz+9qi8G961j8BYOD7N5ytB4VxQNalR1v0RwwVfgU:EOWJsv+9qi82kj1OGoQNokRkU
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline2dwrkdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2