Extracted

• • Target
    73cda9ae7da8c31ba6bd2f056a1646ad.exe
  • Size 400KB
  • SHA256 9df9fedac09a927e5cb60bcdca9495e6402b8c0328ad0037b7e3c3c63150dfdd
  • MD5 73cda9ae7da8c31ba6bd2f056a1646ad
  • SHA1 a5447b948ed9b15cd9cc76894e976630c122c23e
  • SHA512 a7aab56c2e27270246d19cc5ea35122516f122c79cebe68109adc5d3342ee55c87111e55c934a58d066314924fa55fb4586448428bfadd6ee24a89f945f40272
  • SSDEEP 12288:iL8brvbXOD2zhhQ58QA34Vggsp6bV2rB5V:C2fXOq1h/QFVMp6bV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinecspacediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2