Extracted

• • Target
    1032590c6140bf0d4eedbe40512244dc.exe
  • Size 418KB
  • SHA256 bfc807b81a6c229e71ebd95710c298f5cff82a7e66cf2a4ed7397dc3f5f798ed
  • MD5 1032590c6140bf0d4eedbe40512244dc
  • SHA1 04a85eb801f59fc81f32eda143a8ad5c3b985865
  • SHA512 748c1660506c90ab28589233efb44aa13a17cb68ce9617a64225122e1d87bc1ff0f2403565e9e284d3c4468093f1cf71563927a78243072b274f768c4adcc161
  • SSDEEP 6144:i+3tsDwuqWRmDwIwygZbgu8+3XsNKyObNLWBWQoIHeEDudLbewfUR+:Z3x16Shwyg5gu8+sNK3BLAWQoIUbew
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinecspacediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2