Extracted

• • Target
    file.exe
  • Size 391KB
  • SHA256 84ef62dbf08c9ac3346ad69badd6cbe783ab32fe68c2af3a37fbb81a7b5e51bd
  • MD5 b648b4246cb37c871ef7511670c09e04
  • SHA1 b8b82d103d975b184709bf32c3884b7d49f7cb76
  • SHA512 c4854adde3cf02d38670adfa2a2a39a3108978a9e3d1e238628934afa1de2269cc78dd854fedc4cab5989c68ff65917e617bfbb1a0de8a3368349d50c60fbe7a
  • SSDEEP 6144:/KyJzSnM2rddMnBJAdXB8GjWg/+TiYpQxSPav2VV8Xtnn0:/FJzSnModMnBGdXpjboOxSPToXt0
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2