Extracted

• • Target
    file.exe
  • Size 350KB
  • SHA256 db002e8b893fd6dee710745042a37df58e48dc40ae5f8b68f061864343441c77
  • MD5 de96b945865f0de53fc0850abd7d5095
  • SHA1 c6c9eab071ecb81f4ae65e62dc503bd3f7791e04
  • SHA512 d881f7bc140a838da1163425dcae44e4a6ec701a9c13c35a38d7daa975afa2b81c167b0fac14edfda30ce76ab2f98de408c600e7972f84b28a2500e1514f72eb
  • SSDEEP 6144:IQLdA1dygXB6R1mbGq6juXK5DJM5vZCem2W/dsIHj:IQhA1dygXamahu65DJMKN
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2