Extracted

• • Target
    file.exe
  • Size 391KB
  • SHA256 ad08b0274d44e0740d5a7fe2b1125ed13ca9569c9a35256e360d8a4c81a45ddd
  • MD5 cc58acab2d41ff0733405aed8ad14aed
  • SHA1 5e6c513a34eb06185ebe9238fea6ab928815e50d
  • SHA512 6a022cdd8399d31f06df95691ae2e9178652738fab7e5a9403e89c3b92c3bd8d942ced9b853ca467110ed3f07d542890d73ccd8d37e3795989e11a2f2a624406
  • SSDEEP 6144:izVFCDhkYR0OFJ0fAvg1eY0BK1BOMBscrgDXLJtFUoWrA8sv/+F1rc0U:i5FCDhkYzJ0IvgePGvzrgxEoWUvv/+J
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2