Extracted

• • Target
    file.exe
  • Size 351KB
  • SHA256 9ccd52333f7ce04c90ae7c8234dbb77ce98a50e2c1e4837eab4f2d6bd60adffa
  • MD5 b2ae824f576629d8cedcf724ee3342f0
  • SHA1 ea0d4ad282c2227504175e6575d49bacaffd832c
  • SHA512 c98daad17988a4666dbfe8efbc4e10651205795cd3eae342a6c2eb2c201f2c978c712423bd2d4039afb5e4039d87eed639a19b9a08d357afff259d4591346952
  • SSDEEP 6144:6fL6Sn8LBACu0tGHSeNn2w5M+i9rGZdHI88Vny:6fL6S8SCCSeNn2w5Zi9rGbn
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinefotediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2