Extracted

• • Target
    eReceipt.pdf.exe
  • Size 515KB
  • SHA256 4c10f4d1da51cac1387dd193fb46ff33c5c867a4e20566a9c3a2acce0ac39d77
  • MD5 4f2009267c61a2d67e6387eb6d35ecbc
  • SHA1 e1153714cce70c30d47d7e4633ad967685e85f95
  • SHA512 e94a2769e89f3b095ef173d1031731e67f7e40ba4142d787ac006491c9f7db2cb2c07e957c4f84c3ae71c4ac5e0e2e716df8084197b2360ab51fd5a7eeae8930
  • SSDEEP 12288:iAKVbQqxMoobFOyb7Q3zQOCiSb1ZlL5/7FTQezI8L6tg0yI:i9NuoAFlbEQ19/7FceztL620
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineereceipt.pdfdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2