Extracted

• • Target
    c7013aef43a09a5eb3388f5a24dc3b88.exe
  • Size 400KB
  • SHA256 71fa97186baedff5fd6ec8a79d4c69d23971d32bd8f3daeaa3024fc0114fd837
  • MD5 c7013aef43a09a5eb3388f5a24dc3b88
  • SHA1 c9e9a819fae184e3ba183f35ccbc9115986fcc8b
  • SHA512 cead55a39518a1ac67466d56f59a3895404bfebd27883a437ed23d835ced057daf48e2e36a1bbadd3538fa565fc45935689b84abbf390533bacc887d58f2890d
  • SSDEEP 12288:wKCWaseqJj8FozfLL9OI2XyRe3Cw6WBmCNbdqln7:hCfqFao7LJOqCCFExjCn7
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinecspacediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2