Extracted

• • Target
    d19ee67444dab3f4a0e8290e4d4b9b12.exe
  • Size 400KB
  • SHA256 1b80d5790a666a04487b4c4a87df20380c680416f8dbcce2ea7f58dd00faf27a
  • MD5 d19ee67444dab3f4a0e8290e4d4b9b12
  • SHA1 2985c447f2e6f165cdffd675600cda3de02a2d29
  • SHA512 3980a62be3271b9cecf52490cf41ff7432397a7aaca98bbc7c49c239c6d1ab4cdc8fe3d4fe4adc154f7b815259472a1a09a9a775fbfb30ffa9e536adb7c913b0
  • SSDEEP 12288:PXpVqLqAvbGfrIFFff92SEV159/s2W4brT+h+i:fFgbCILkNV/9Dhah+i
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinecspacediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2