Extracted

• • Target
    file.exe
  • Size 368KB
  • SHA256 963ffffae1211b31350afb547a5342bc4b6a44255de5b0cffd068a676cab9e05
  • MD5 b2fca3c99eb16638a060c5fc8cbdf92c
  • SHA1 214ff8cd4aab0a98d175d19ef39c58cfe9bcd658
  • SHA512 d44df13098d445ff6734aa877533b99f4cbe67856cdbd98238741bef228e5543d9debee8b550e753a1bbf2e94c76af160299e3d6608ea10ac39dfb3fb7e7d2c6
  • SSDEEP 6144:P43n1+oLaQa7sCFX+2OfoPqr+QgAGXLMefjVoT+iSEuZKyQg0V:P431+o217Tlkr+AGXAefjuT+iSEuUyqV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2