Extracted

• • Target
    file.exe
  • Size 351KB
  • SHA256 9a99e028f882f2cb640a0f3dbb550ba09430957a7cb86b0a20796c452a572da6
  • MD5 42bea5c82117d000e5ae03ca9ed04425
  • SHA1 e4e0908e227882940ed8ba91e305455f7365a55d
  • SHA512 95aac1d57154639ff72c789453d1e73b7d8d9c1b32c59875a9a1526bbcd0beb1b1d21d51cfba2a1c835644d905bbe7e76bd17036116483824bb9862cfe5e4e3c
  • SSDEEP 6144:1ALA1Pprg19H8y/tT80plSvPKMxW022unGtq9hC8:1As1PBg19H8anSdx/2HnGQ9hC8
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2