Extracted

• • Target
    file.exe
  • Size 370KB
  • SHA256 84bbb780ebe96f35146095794522d95bc2ee44074ea44bf1f7bfd298b6e8d59a
  • MD5 ee35ef302f5ef4111de78c275535af7d
  • SHA1 b3767c50a6a43aa63fd539a4275b66317384d4ff
  • SHA512 a4e5d3743d51417f643ee0649b254f5ec1b9efbc5b9c61d72bec4929936c63f307452d615e9180a8de611a41e2123fb39e032b906407d7441000d5a0693135d6
  • SSDEEP 6144:XY6r/4WLLHQ+w5HUc4HbCrIy5YhiPEwV7cG4LfXip1AeUD3BKVmOdk8:XY6z4W3xwStor5M2EwV7SMAeO3ib
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2