Extracted

• • Target
    file.exe
  • Size 386KB
  • SHA256 006b1f025e75c853f3e776dd579791d6ac479bc25a6f0bbec92af86a149dffd8
  • MD5 116c0e8343a4bd13c60bc0982664ceb6
  • SHA1 85fd3e2e9a30a3ff0e2ae416ae86decbd43b0f48
  • SHA512 cf8ffa44bca15adabbefd217f451ba9c99fd6c8baa8291928394bbdd716f007915217c1cd6d85b714b25ced1ca2df4f31693d30bd1022fbf46d5fb142dd24a3d
  • SSDEEP 6144:5XI5XL/kxUU+x6NmM2rfATVyYM1MbYA4uGe55/eeTt4iqB/7fBjmSWFy:5X0LkxUU+cF4fATtMoFeeeiqBbCy
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2