Extracted

• • Target
    file.exe
  • Size 355KB
  • SHA256 ad79ff65468c5c8644e27c2ee877188c3e0f1961c003cd2562829b8e04e6e53c
  • MD5 3de86650d164c86f64be52ae80ff8263
  • SHA1 0ee9ffb0883c9125dd0c72041f9bc1e2f3d837b6
  • SHA512 32d682d323fe706004addb8b91b85b665be1ee88e811c87f8b6e27b19752fb9601faee60f7409b2c6eae2200f92b623a88adb25398a286cf1252bce233e48730
  • SSDEEP 6144:SMLKw9lB6Q1lXvxivw37J9JOwn2apBezZpVV7QYVLrTkTygjgWq2:SMGw9SQ3XZKwFl1pMzZrpIFj
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2