Extracted

• • Target
    ca9f61aac07cf4b8e4bb19dccd0e28b15ba6cf7377749.exe
  • Size 316KB
  • SHA256 ca9f61aac07cf4b8e4bb19dccd0e28b15ba6cf7377749e98c101288ca8e41c1d
  • MD5 fac62e4200746ac6e123c91ff56436c1
  • SHA1 5a406bd55bef0644748e52173fea862a7a001d73
  • SHA512 ed982795a557a896f2d78d3c05cec5f484a4c7ff0c59cbf09336902eefbee58bf489f2616642422c010361665ce4ed49c77f006c47974d36e4be64c0d3dd29bc
  • SSDEEP 6144:K0r07ZWnv2qZfwrevAkHn8pANtLJTPkiga:KIiWNYqH8mfPB
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinecspacediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2