Extracted

• • Target
    3134ca80b1a7e683db781aefab1abc1d.exe
  • Size 514KB
  • SHA256 fb65db138ed870c36bc6ef04c5d13b7e6789dc5d002cbcfa2111341fb4d20b13
  • MD5 3134ca80b1a7e683db781aefab1abc1d
  • SHA1 e42701003d66740f2aeb6ea9b509e031111115ee
  • SHA512 3935ddde8ef0c29ab2d950fa558232ef89be4ec7bed3bf4958d52a6be033dfce44ea880dbcdcc5025b8b9318ec004928aaa96c5f55ea31b83c4cfbaec9cd8c34
  • SSDEEP 12288:AVHyFne+sqvzgzLxEAAGEksWVCZSxWEjp7Sz/cCDctKuUz34Lwnn3T3u4F:ABpKzgzKAfiZSxWEl7SzpQ0uUjHnD3
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinemewdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2