Extracted

• • Target
    file.exe
  • Size 358KB
  • SHA256 f5b5010846f8b9d120cafe1f08ecea43ed3db53cce2c4e4bf166c67dd15bb183
  • MD5 addac1bb4f178f28b597313f628be173
  • SHA1 0745e58ce9f124dcb73764bd87fc46ca562ae2a5
  • SHA512 cd588d6c58532650d3f1f43402a27039c837f446ffc68a76126cd89bf17aaac5571c6bfc1641b0bb0fb9191a2a43c0c5fd05e9e09e42db5e17b5d9d076e4b5f8
  • SSDEEP 6144:bdsLh5DQbUkX6eOYkszHXQ63E4bH9c4iNciAOwkrH0COPog:bds95cbVsq33u4zOwkgW
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2