Extracted

• • Target
    8166ffd401a73db4436f1870d04aadc7.exe
  • Size 392KB
  • SHA256 7581f7b63ccef4724b9ec73a2d0cbd8533299daa1e878ca0e4bdbac43a79edc0
  • MD5 8166ffd401a73db4436f1870d04aadc7
  • SHA1 b50b637b37568a473d192596ef8a627a75417124
  • SHA512 7a2c522b40c9c0794d013917a62eee3104d37edf67f1db27ecdd4e1a295185e8c88c7036b5f094add2253b516930a63f796c2f21dc4a61f961e9edf3cd41f6b6
  • SSDEEP 12288:hBxc1lAuaQz6QelIhl3x6MKsDiqPIqhaj:Hs9vz6Qdl3QMKglPIqhW
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2