Extracted

• • Target

    file

  • Size

    398KB

  • MD5

    3e1ab4e7d787cfc18460393ce47e4181

  • SHA1

    27aa32e656b4d4d8e80715849468f3a2e27bf4a0

  • SHA256

    cb7296e2a1380a3459d874635a0174bf89a14d869cd8322941362e25695ea4f1

  • SHA512

    4cadc683724032da7d65fee5e5de9b6b6b7552cfa423b3a7093b55065f720755d530d58e04448bba044ebb3bee2369315de60010c26499dcad0af4a9b8216722

  • SSDEEP

    6144:Nfq2lh8pgnumARsUpYkLUKb4l5eY9dltRtxE/GQemoM7QZ6j5:Nfq2jEgU04ElTX5xE/GQJl75

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2