Extracted

• • Target
    file.exe
  • Size 350KB
  • SHA256 d6264f23108ab79fd253a5d8b95ef01d65b6f270e01d0aa7aef38fd394c08d68
  • MD5 da5cfed282713b54cf2633cbc43b8f85
  • SHA1 ec8087e4d7cd2d8971d8a68f6e0ebd33dec817b6
  • SHA512 f24b4bc274e8985a0505ca81333d77b500f7e022cc6271bd917bc853f7467e2c8b04f8461109742215cc0ed66c72cc8194937b2c39abc609c35e726ccacf2348
  • SSDEEP 6144:sNkLPUp1zRu+pCnqoeYxhR97JgKJnM1F7Ekdb6mPq7MXISb:sNkrUsrRpR9GKKDBdrXISb
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2