Extracted

• • Target
    file.exe
  • Size 356KB
  • SHA256 afae41f0a238b37a8f47c1f120cbeeb988c556d2cc2197178eecc76495a327b9
  • MD5 fe19e4d14b2a11b94d7be5993c10d707
  • SHA1 81a96371a483ca72fc3daed06c315ab88639b593
  • SHA512 7732513d8897433971c4f67aad21da1338186d11d14ee7dbabf0da331b9ac58ea3192b4b0bac9186a8c7e405632cfffe6eb5bca4917dc0b05699bec99c834d04
  • SSDEEP 6144:rw/LFxqGMvSY+IVH3HCjnAfitMmPDSeyGPlxpo3MXk2EgAyTEHaFmo07:rw/5xqGK+wHCjAUDnplT303gAZHq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2