Extracted

• • Target
    a67d97870c265d1beb900acf3bc0c4a0.exe
  • Size 392KB
  • SHA256 bbee99aaf8f3ca2de2bba1f06f3e28d575eedea2a45c937a15a0bfd0527d7055
  • MD5 a67d97870c265d1beb900acf3bc0c4a0
  • SHA1 17188ac5f62e63db6963727b634c6248b6a9bf09
  • SHA512 b0f626e1e3e9de11cd41806e59887cefa4fbff022acf37306aee2910afa5d2b782adbab5466782261a5abe8d42aa7a4d2d497dedd9b179111b09618388d9c0d5
  • SSDEEP 3072:fKYvfgYqUNntJMLNOjn+2d/qnbB4cZ1iQWtrBnlk+IR3rVZB/S2xlfyb9Y1q8tw:rfsUNnXGNOjsB72u57VZB/Hf69yV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinetwickdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2