Extracted

• • Target
    file.exe
  • Size 379KB
  • SHA256 08a013750c3ed9e339bd3648d917d2d4b6e9abe21cc1ee36cdc93a136bd5280c
  • MD5 8fde533400c75c1f2cc9b415194ec628
  • SHA1 478c582998725af3f678536784123596388f3c16
  • SHA512 dc8c13d6a3310e6eb043643f7624ca995823c5186efd080db8af46f74cac69ee1b4389cf360efb8dd332b32b21006b1acdd949fbc9b96d27b0e9eab5e65509b4
  • SSDEEP 6144:1fkCmL6j6SRN2EyA1Kj2jbx//TLgWIrxlFzB9+rctpbsCdELl/xcufMzPb6:1fkV8RRN2eKj2jt/bLdIrx59+cpbzw7a
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2