Extracted

• • Target
    file.exe
  • Size 374KB
  • SHA256 1b1290ed02b74182f7895c6809048627ff3cfd9b50bf0c250f2a59956a568468
  • MD5 c5b52060359c00c4bd3ff4f0ed164c77
  • SHA1 af0c495a29e73d8c5409f2f05a6bd409e3e5b034
  • SHA512 bc485a051edae57d68c6f5bfb6cb7b9414f6fde9e79f360962b4d318021055ae93b248a3744a0ff8489422ab3d7a1c65654e6eb0a8f50e462b79b936a823ff6a
  • SSDEEP 6144:WaOMLmrhezen2QG69ZFv8yNDvSfE3VewqogxR/Pw9Mej80nP:Wa3yrh+BQhFvBPYwba/YSI
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2