Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 8e90cdcc9297cffd12c3f4c6a2efbcb03edfc9232a6630e927df0f943ca08a47
  • MD5 e160222e27328c5d2c25670f1d6dc68e
  • SHA1 4b10fe89e21d590a24900005d67666ff97127a2f
  • SHA512 4d9c084fc038d3cd1d48c0145511bc4f358d7596b3c42c947a8697d1fed1a0827c19c6cf6983a5a4711387b99232c877a1e236a2cc9a28515c272d6b66b18ffd
  • SSDEEP 6144:Q9qDpk1V7frHjuwZ3y/wCmXjo9UlxLusYMBSs:Q9q1gViwxBWUzr18
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2