Extracted

• • Target
    ce9ab303e1b71ed515ca34f2e7d9c84c.exe
  • Size 388KB
  • SHA256 e1384145bb48dce3e44a1888ae8ae919cc5c783f5b63cf2bc22098a5a2aab0b6
  • MD5 ce9ab303e1b71ed515ca34f2e7d9c84c
  • SHA1 88cea1167d267dab112d4b7d88b7f060d5860cb9
  • SHA512 872693be22f565f752b0d0a58dcc25a1c04d1ed0b403acbf81297c1d548aa436ef0b3f8118db8080c998fd9cc9ed23b09d636def09e52b69a1d2f77e6e229951
  • SSDEEP 6144:4xL5c1EOrlC/rkYzV4YlDFoIVH4mFWFpHws:4xtc1EOyZvlDFoIV8w
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinecspacediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2