Extracted

• • Target
    file.exe
  • Size 375KB
  • SHA256 2ca8638b31cb420f3c021ab4803f4cee8eee38117d68b7561bf82cd8ff0b52c4
  • MD5 416225bb7b03531ccb5f2dd7df89df38
  • SHA1 9f18c4389ec4844ddc4279e85e6b18c8f0e626da
  • SHA512 f8dc93a164f230eebd6e8f07c85db40ce2d6baa0b21425cb238f191567a8c5fabaef42c039ea831af2ef944c3b903c756f70fb8ea429d723a757ff0b95b74f77
  • SSDEEP 6144:y6ZhLn2931ThgrnoWeuahXCtl7gHF74UV6wdY2Q0Gu86or:y6Xb293anZtaCfcyUVPdYgE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2