Extracted

• • Target

    file.exe

  • Size

    405KB

  • MD5

    0fcb5acd8ddcd2e8114bf6e79ab0acfa

  • SHA1

    d2068994c63fb124adfd87aa0667577c4d60446a

  • SHA256

    2bb7d80cfc5a1154bee8090732523597ac7f7cb3ce909bdb97b3e3ec02c8887a

  • SHA512

    dc37f6a9d5e75ad501838e9e8216d0de3184c392723c1623705b690374c5e07e5d3f87f91f1aa5361d1085da76cec4120f12acb83561a4e83081417be0ca1293

  • SSDEEP

    6144:HonqiJMZegm3s/sDZr9tcvJ9TxpDgVjBqDxkiA2Pf:HUqsMAgm3sTJ9TLDIBYq

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2