Extracted

• • Target
    file.exe
  • Size 347KB
  • SHA256 7fb66e90aa395e63d9701a2b5c796742ccc900a5b02eae39b7aaebc6c69fadff
  • MD5 ed7e1f2d8b35ea294de6a9adfccca220
  • SHA1 f091211661d3e5c9c7e13757d3bd6db9c42dd8db
  • SHA512 e64f7a87f731c53baef9d2ad0b5f4eeed28e16f3b3ef4a89cec7913a5bb354960de4bb28410446c0c3993626845f11b5f57922abadf7195d08332cd8c9cb427f
  • SSDEEP 6144:8krAjKxLCst8teE3ooH98KHCFVZBrAY5pLFrMfA6e:8krA+x2q8X4k9rCFFsYvRsw
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinefotediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2