Extracted

• • Target
    4d1279c5690b4b7caa1e19f54a81cc3b.exe
  • Size 393KB
  • SHA256 8e9baf00a4e461527ef940cfc19cd8ca1147822fac01ee5e6fa1dffcd094381b
  • MD5 4d1279c5690b4b7caa1e19f54a81cc3b
  • SHA1 c2c85f668eb8e77a7e8f52b345ddd281fb7a5ba3
  • SHA512 c3295e058e6227f1037659fdfd390e62b09b98a87456a24ac4914052562602c0371ebe4d3ac65ba849efdf766aaaff69a90f7c5d73808c45f1723a47997089a1
  • SSDEEP 6144:gRuBJY7X2yBWTAVrcS7MvE+PD3s/CeOrQNJqsjvVLyP0BuY/o2J8/s:xnQ2mQCYS7MvE+PI/C6ismYNP
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinecspacediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2