Extracted

• • Target
    9c1d36b25c0f7f13861a80c403074ca7.exe
  • Size 411KB
  • SHA256 f2609207a1256edd5866e25d1b9dffdbe9d730df93fe7c44684ba77fe384819d
  • MD5 9c1d36b25c0f7f13861a80c403074ca7
  • SHA1 24658f98286e6476e07f230098ce9c019dc7db58
  • SHA512 c4eeaaf0dda6957e76acc7693c233191cd2db9afe110d756b4d20171a27295be661400b630bc2c07e8f073d768eb23509100091789a2a3e6ab190b94a72112fd
  • SSDEEP 6144:vwLoVHVMnwbwUs/oIX6JQ9zQ63ZqsLUQdk6+rZOJdBtQdWKQ+jvo:vwEVHV264saU68KG9rKubjvo
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinerambodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2