Extracted

• • Target
    60abea219b93098403df8db1f5ea01bf.exe
  • Size 347KB
  • SHA256 595ab0e3cd7b2fb79bd51109e09eb8ac33310cbdeb0b46c153baac996866e33d
  • MD5 60abea219b93098403df8db1f5ea01bf
  • SHA1 b3efc30e3c48f0d10ef4c73feea12038ff4b2c6e
  • SHA512 e8e8e04f57c9e74fc655f36a41c62ccff2e4dfa6e127e713810b375ef81aad25eb125583a5a4df80a9c1460f4acd2affc2d8ce251fa6171549ac6be180b6beb6
  • SSDEEP 6144:yQFdSLLCdBaTpFYU7omOQ7/JnqrB/swZi1BwmMMXaC7BOqYFL:yQFkLefa57fjJn/kyco+L
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinefotediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2