Extracted

• • Target
    897472dda68c7ce36cc8236e40625e14.exe
  • Size 393KB
  • SHA256 8b2af94f8cae9584369aa02d3dc1550be4297b6c6fdfd959b51ea0563a0ff79d
  • MD5 897472dda68c7ce36cc8236e40625e14
  • SHA1 c9ed778f7f0816666cff4c77ac21c395b27de0b3
  • SHA512 d89316b23a022cc18e0df38cce244e53746bf77c67c4008952be7db4114df87d6bccacfd2b7564c0d73d859db8b63be98bbb354ab83d6d61a53d58e2c3c4e363
  • SSDEEP 3072:Sl4W4P525Gw4ycF9x71E+LTZj6lfKA803CUfw0WVtlErDeQrgXDGWUVRSaRSGp9I:IS9x71E+16lfhCOcveCQruGia/PK
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinetwickdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2