Extracted

• • Target
    file.exe
  • Size 398KB
  • SHA256 caa9458f14985b1d1de68af03f88db426a844dbfb8fa8b1f670e8fe256238049
  • MD5 2d6707b569e21f105a82659db8ce262b
  • SHA1 104704bd5d3f60a319727cf1abcd807e21b754a7
  • SHA512 928c91c91180ba1f8e195c96ee8532c6550e09cf97a8fe9c56dc654644a092199671f58e19dbca7b5450b119b0a8de74de6abe282fa97fbfaf5036e0eff54013
  • SSDEEP 6144:w3TqkePhdTkBR6Yk6NyPvC756HaW5zeqqmL2sgB61mip/nM:w3TqkePhdTkBMYdIvC0HhKmL2+Mip0
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2