Extracted

• • Target
    94c58fc8224320885f2512299e010737.exe
  • Size 393KB
  • SHA256 7e267701b49da697a35ecde1e2d72b67e38ff0c30d0b5afb9ead0f453e931d62
  • MD5 94c58fc8224320885f2512299e010737
  • SHA1 5cd072644b26ff4cd3e4b30525bfe0962d181c01
  • SHA512 28a553cfd3cbda5bc0f1556e0eb14d4fa28210e394ef0646c3b0dfec7e6aec05a688231eebb8581e582dff260c55acede7e9f524aa47e920b7a0256608c144b1
  • SSDEEP 3072:uyLaT9lA+0aGws03KNCt/utmSVCznl9WX3FLuteMrIkl4cLoY75tmprCoL7c9MJT:NOKNap6Cjl9WXYte7kRLoi5CrnLY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinetwickdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2