Extracted

• • Target
    file.exe
  • Size 364KB
  • SHA256 a6091a5db0adf12e6879ce846f5b2a8bf5ff2d0b23e1727d3a811f34e55b8d4c
  • MD5 0e515f98eb7936a6f33c61d9b161a2d7
  • SHA1 355092c7b84c5cf11c68b1e5a0fae794798b7be5
  • SHA512 a7f00505cb834df89ba0b2a28becebdfcd8ac77a91ccda0dbe4b9c3cada102a578e951db50b6f5e1b3fce46ce680856e7dd12b7ed12c48564e9576001358a41b
  • SSDEEP 6144:7GxLFBvMOT6gCTmZ6her5oldCY0a2Ev1sIm5gZteIP+VCQEmxN:7URBvMOTeTm4hW5olYLAYqKTs2N
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinefotediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2