Extracted

• • Target
    file.exe
  • Size 353KB
  • SHA256 8ac158fb6e0c8502387f5fc4b8103fb500b5d5cc6fbbfdb5a14f4a65ca3f38fa
  • MD5 40c0577dda7e602e7560b7f8e4f7bc9e
  • SHA1 0bf0166c51625b001129c1cd9a15439d4f7f73cd
  • SHA512 504e4e4595964fe3e14096131941b7c6501903f0a77502120145cdea2cf6ad781f51f27d556fe65da76a6133f8935e47bc6dcfad1b0add7a0c842b76ae270bc4
  • SSDEEP 6144:bRyXLIf7e/L8BF3fdLn4E+I3+z+TNj3ROjgtDh8lsLOIY6:bRgsf7+8BFJTNj3AjgR22N
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinefotediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2