Extracted

• • Target
    file.exe
  • Size 321KB
  • SHA256 a57e91b1e89315aeabc5feca272d222cbf8732c3c602c8d30b0452311d411d31
  • MD5 e141bf9bd54803588f3fce848846197c
  • SHA1 1c07deddc40ac4aec1b3cfc9a6c5b7bbaca75f13
  • SHA512 a37cd8259de48f1131d6ec1cfee21a033b902feee4f4e98c0b7b5711d733a3cb396f7b0be9d5bc5535982a611bafc68e3c3d116951ea6b7a76f114f7d669eddb
  • SSDEEP 6144:VsstDWLCDJIG1pXcK0AVoJF1hKgApDxn3fqQ1bNdmY3cY/gvm7YkgE:OGWEO9AVoJnI1l13mYng0Ye
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinemixdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2