Extracted

• • Target
    c193feccea2882efe24f9f8aa554e36cd2e999612d7f3.exe
  • Size 317KB
  • SHA256 c193feccea2882efe24f9f8aa554e36cd2e999612d7f33cec2b16b3a06722738
  • MD5 ecfc30d0354af56b227845f4138c4442
  • SHA1 91520f215a7f2d23aead2a6da1cb2dbd15d2be68
  • SHA512 de1d01f9fb49717f01801b80921c34063049778f04b894bf80bee1082269b502c3da5436320ce1b2c26c6a4e4d54e7407ff5d3d7e5c06d34706ff3dec658a1d8
  • SSDEEP 6144:gSz7nhGv49VSLf1gv/MyTUXGymtWPEvFWhkhKx++fy7Hkiga:g2Yv49+1gv/DWwghkLTB
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinecspacediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2