Extracted

• • Target
    04645380b7a123e7e24f57c0e041dab2.exe
  • Size 355KB
  • SHA256 f5e4e57c0c6b27846676f07828e2dc02837f03f83da2471701fbadea52fd742c
  • MD5 04645380b7a123e7e24f57c0e041dab2
  • SHA1 ecf4df5946a17fe9fa9101bfae6e7b6157fcb4ef
  • SHA512 57d761cb59f65f8605899b46c7041bec06fede27254073c2a911d1b8b7e2472dd06bcb572e1d3af64db18f143eb19ca0f3a88557553548adc5046a9d7d195771
  • SSDEEP 6144:jdtS/GZm98+dkSQaoqVB/OGq1wXQsvufaoqLZpA:7S/GhykSQaq1Kuido
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2