Extracted

• • Target
    file.exe
  • Size 368KB
  • SHA256 f5bbb718bf3f63232dfbf34ca84b77ae03a13cb57fe332796fcacb8c6b0d02f3
  • MD5 52e3ba5a54147781b08a0d1a3846a763
  • SHA1 d0798f4b53cc1f26950d2bd46193478d3650b19e
  • SHA512 6d6ab0836737ef1f0f5031ed3f78f14181cc02b48d0464ac10653f2388e014caac3a70038acefb16e44264b9cc0635cd4bbe36e09f3c33b6f1ad37cd9954e36b
  • SSDEEP 6144:+SMR6ALKKgzDgR+kmgoB7PhQawFBz0YEehCkMVjqcm5ywQkH6Y3QZ:+SMAAepzA+kmlPhQa0WfehCkM06LsH4
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2