Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 7a173f7dfc113bb6f99c969388ebbbfcfda82eb51ac6acff8d6af302dfb3e4e0
  • MD5 b66df5d952cde85a51e7cd33d70749a7
  • SHA1 62a8c8e14eaa22611968ff1936352415648876d6
  • SHA512 1dce2a8225da36131d3b9d36e74f23df9ae3ac1d95991b7a09ef2fefe2425d7249ffbb3f230d8ac026a58eedee2f27578f2bb910ab44b0240e9660215ee29069
  • SSDEEP 6144:iqi/Am1acUiFgWlR+qUt5WceTvO1C69B6QydvvdgF+glfGXSu:iqC//F90q+aT2s6rvyhvdW+M+R
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2