Extracted

• • Target
    file.exe
  • Size 440KB
  • SHA256 6f834842294a87caa8eba0926c8d7dd28de4f57bc600ab7a36f9335edd1d03c8
  • MD5 56900dba167879a361d18ed6726036a3
  • SHA1 c47db5866f8547056c125f8e1757325733fc50fd
  • SHA512 069334b7c661e37584fa1274b8aba5d6a83ee216c3c9424ae3e93d55541a97173979155120d01bbe33d1b42b8c10ae539fc3749f87e3eedd35e78011850ae7bc
  • SSDEEP 6144:ohs87auDprO5hrFJdGM5OwhwlCvRJuH0d6AmF07ITsq:Ys8+uNcdFJHhWkJs0oAmF07
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinemixdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2