Extracted

• • Target
    43ee7212f333ebaf5387b4a88b33f38c.exe
  • Size 392KB
  • SHA256 07c6514e6b5ec6e2b9777aa411aed5a162d3395cf6f8ea52a27985d0c55fe864
  • MD5 43ee7212f333ebaf5387b4a88b33f38c
  • SHA1 cacfd08e2f275e2f9d352c977134771d25979bbd
  • SHA512 6d71c4f5db9970c0cbc784b349ff78ca2fad62200511e35d1dd0428c060f35f21dc9ae8bdac245040f1858d39b510641614e44bbb14a67a0400fee436ec20f8d
  • SSDEEP 6144:+vHILtpU64ebKnB1IDwy+/+OaJuWshYd5RmF1sPvYLdsQcBpi:+vHILUN9B1IcBlaJunhQ/m/snYLdQBQ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2