Extracted

• • Target
    file.exe
  • Size 387KB
  • SHA256 032c8aff5321c0cdaf274cc46d1b2297dcb73e24e49c1eca091af963ecd609c8
  • MD5 3d73e5d6f2a48f235e174a06d5309434
  • SHA1 2ff1bdc029227e97c1d7885c2344ae443c1ca9c2
  • SHA512 0874942e6225ec993b4c2423befdc97be74d5001a87614ae4ab10d44593a519c9fc579f965d2187d3cbe4e726ce9005c7a0e893e1c774a763a7eba6f6e6bc2c7
  • SSDEEP 6144:r2kiKJXjSFJm/MUhM/VvQmhQCLS6d6oxMSxV/ATRk6euanPVKHu:r2eJXgmU8M1Oz6d6kALanP
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2