Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 c3078a79d59e7d8805bd87941ce7f04a70bc822c04bf4aba68512f4b2d559feb
  • MD5 8eb00748b28ddc0a448826b58d2376d7
  • SHA1 8bd764da6f3f694a1616fdb59b4530e4e74c25c6
  • SHA512 e2827a6955029f63d41921211eb37e9dcb0add24ca5e5df6a75e63329174c5b9e0bc2e5b9eebafe67ee7d7081d63dccf034464ca36f7e1b899d7157e42087cf7
  • SSDEEP 6144:bTy6ALVjIzWLHws8a39HYtX4DIoOncJ8U+R3JJGR7OP:bTyDLJccws8atHYuDPYRZ4
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2