Extracted

• • Target
    11c5ca4f749a623e06d78da3a41ca2d2.exe
  • Size 394KB
  • SHA256 fef5709bb12beac0aea8a1674d4f51d8928739ac3cc9e578d529fdd782288d13
  • MD5 11c5ca4f749a623e06d78da3a41ca2d2
  • SHA1 6f07406db722bb2a2033351f0d786dab08d593f6
  • SHA512 8480c5a88626cd4021af34263a5fc45e2eb459842cbbbc79a2564f6af7ea3462501e2d7ad9cb028bb71a72d42dbaaf88c3a20403910ba5653bf9feca8816d7a1
  • SSDEEP 6144:rJzHlxbaNrWKhSAR+B3slmb4OWHdzj2iYVdfOEAUrQKPXEa+iwQ1:NHHatd58B3slmb4OozSJVIEAVsXE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinecspacediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2