Extracted

• • Target
    file.exe
  • Size 443KB
  • SHA256 87b3cfc024e5d82cf72d644685c84b774e8fef207d47679c35896190c0dbfb81
  • MD5 ae247b22ddc07d03b95dc4ffe3df51ce
  • SHA1 96701687fbfb3398bd48f320695c7263c2313cfe
  • SHA512 84cead94c51fbcbf2b360d2c524a86b477c44cbc779e03d993f1853340e01ef763c4a6b494beab3659b8ead083a2f1ac93db25b429a72329f887982e6600e374
  • SSDEEP 6144:1/YLUSV1Lef+UTsDHjGOtrImHOWriJU98d9LtWzFh1767ITsq:1/YASV1LelKHKOtlA0YtWzFh1767
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinemixdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2