Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 3507f2b815b301d68e2ebd42e4bf95e5c60bf0a7b734e65baff7716d9126a2f1
  • MD5 8600463c912325386ff7453fb677f492
  • SHA1 668e6c76cde554877acbde612651861efb6e3f3d
  • SHA512 62fbd9e6e6e6cd831eea91a0467d6c1636f32bccd561ec4be98ee0429b995c1b335a9b4a7ccf85d972b0444b1e6345af7a584b5fe204ffde030d9489e39d6df7
  • SSDEEP 6144:2qkEmAswJx15ix4PtBe3ObPI9lKfWzio3hj7gtv:2q/OwtixutsKQTKk
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2