Extracted

• • Target

    6e182d29bb2e65bcdf9e2a4364cc1562bffef52bf3d92ec46333b153948fb3a8

  • Size

    363KB

  • MD5

    6e741cec75371b2c53705a70cad81147

  • SHA1

    97c1059e4548585bb83e619205be7bc93a1460a9

  • SHA256

    6e182d29bb2e65bcdf9e2a4364cc1562bffef52bf3d92ec46333b153948fb3a8

  • SHA512

    ec2c4b2c13fb0d870733212a14e6b9b7ab1f16806e23815c40daf94ccf7890955952fe947a90e4f2fbf2363379be1e599db9d8a1faef45a629bda111ca77a06e

  • SSDEEP

    6144:FOJ8pW4DtzaBJ3CB+0g8PMUUQ6stIa6Zd/JNIb2Z27CoA9dgWeB8AIDp5Q:FOqW4Z2b3CB+0g8pU62aI/bRZ0A9dAk8

  Score

  10^/10

  redlinetwickdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2