Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 97c7020e4a09b0fbcc6ea577d483308c4e0ec093debbbc207f59f1d1800430ef
  • MD5 6c1b9fdf67baedffe9901cfe3469f8c8
  • SHA1 834b65064792f7bd739f86f8908219f95b92c1e0
  • SHA512 8eba9178e00f7280b8cd6f1a26c8ed3dc2bec834b901dec6c6dda5186409eca2d23383ef3e5ac223da42b1911baee2da70f262169f351ca0a6d53548604e6521
  • SSDEEP 6144:oqMimMzmEFH0Pvqre6FlWW7InmuccWw7PP8SPrUUjLT0yGrX:oqB9z3FUadcmucc1PgUjH0yG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2