Extracted

• • Target
    file.exe
  • Size 386KB
  • SHA256 b222b4a41de6a1865f8cc919f7e18d16d91f36d2c27c3a4ef115da3b2c0f0516
  • MD5 c2dc577c34382a095f5086276d98f1c4
  • SHA1 5a73d1ca669f19a5c2e7b0cc8d1c8d966f25dd8b
  • SHA512 5c6976e0a1c0486f1bb76da3bc2fe00603b0a3f8afdba26ca90313ccd79147404127c840c8f690298cc343cd7a7ba10b8d2313eea718fb4ba1156befd74f829e
  • SSDEEP 6144:ztKLtLQABTtvscrHNQcSAsYGc4NyJJm7RNHuNyH3Ho1izW:zIRLQABTacrHNQcSpJfka6IXHor
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2