Extracted

• • Target
    file.exe
  • Size 391KB
  • SHA256 80fbdceeba1ae88efe902e8a0d1349d43c3c6e1462af5d7195191f6446c1d60d
  • MD5 921c82b842c2bc715558f2b89ffe6926
  • SHA1 65a4a78c30b1e8e009e3e32a2ce96cf7bb3b8b5c
  • SHA512 4be6674542f68befb8e5dd50efe083041138e5194cee4d5df70e840bde7ffe4a8748b5e4b845318e66f4f2ec736c4fdd30cefa2ce977b466b89de99b1f6aadc3
  • SSDEEP 6144:NEc2+Xy3jd/7l8BwuiIlNFdFFniUh1h1zSYNBKzq1sQCmEHM0U:NZ2+Xy3jxx8mui0bdDiyzSYy+1s7
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2