Extracted

• • Target
    file.exe
  • Size 404KB
  • SHA256 166540cb4f5358812bcfb1212e684fa02891990daa5e868dfc56a2264e8e574a
  • MD5 0f28ce8e36d2fff532b5d8945dc14a55
  • SHA1 c92bb4889a71c9b11440164341cacf1e71d0922a
  • SHA512 c266958a211a47f5f383c28fbd8428af86c11e9d270ad5198a50616260c8ddc168b6a8efe6481019fb586f45520702089a64a7d9ac16753af3d2287753d77af4
  • SSDEEP 6144:HqU0mwOdSuetiDDhrR0VFRFtrkN5G7DXM5SO3tx3hG:HqriSueto90VFXtUN5SO3j
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2