Extracted

• • Target
    5e3af0cc4d5aee2efbc82223d5f557b0.exe
  • Size 966KB
  • SHA256 efc498b7f6def864d578812cfc847e4b2f6d07cf80396bfec29e6cbb179eeb92
  • MD5 5e3af0cc4d5aee2efbc82223d5f557b0
  • SHA1 ea369b6a2bd633df00592c7ae6aab0e0d30f4f72
  • SHA512 ea1ee183dbb2e63d9e47e6ca1d1a634a5353a47ceae98d8ae62afc0c8baa64cd9de459e405ee53dd57bac939bd71f14d423f7cdb7b46b28fef456442bf5e555b
  • SSDEEP 12288:m6AIH6oH/FNFGFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cbc1czclz:m6A2JHfNR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinekoi_fixdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2