Extracted

• • Target
    file.exe
  • Size 350KB
  • SHA256 d285d0a18d5e51285963abd72ce31c5df6901b4898a9a0bc5db60c8b7c258306
  • MD5 797195554e16bb3fce561128fe6a9272
  • SHA1 22fdb920c551e21b9c6190702362bb0dd1260d2a
  • SHA512 c75fa0d4c6fb41f05183cfc4cd581c6acc40c6dcddc2b8dd94727f4cc9cb4834c11c37b9db1405b2884b8bced4fdde3721dd653fcfcf1bfe0ccb938aadd04dce
  • SSDEEP 3072:GXS8LNS/O5g+rq46jwuUKr4sKDc6e5GJEi5s3afSZcpjRc9QsWaxjikyHTI1g1LC:uNLk/kUwuGDHDu/JBqI1K+dMxZnOJT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2