Extracted

• • Target
    file.exe
  • Size 397KB
  • SHA256 e41c6f2ea948ada4071efb5e95e528d5f640714e0c5c14a98e7e7ced0f924a88
  • MD5 588a8fdeacae2dfff85fd4a8423d66a4
  • SHA1 aa7a7dd2b03258fcc8a50d8419852dd71dc34326
  • SHA512 e773725ea5d7f74f87971efb9b36e95b10f7a8aab6e77656326c8bbf270d3d4acb2b0f1917a7ff41ba60a104f4f29ab8dd1afc1342f67995b74ed033c7018dd5
  • SSDEEP 6144:mlHU0LLozZs+7NjJME2GvQisHdkOC1UAEFN2wCS1aupUPE:mlHhIm+Bj2tG9xOza8U0
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedzkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2