Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 7012132a463dd9ddd6d744e376f034fe8808eea2cfa3e7436e180176258090cd
  • MD5 e1f91551d2d3a2756b84657e54586729
  • SHA1 8d7aab49ab6bbe446173b1c5ff71ba1c95c634f0
  • SHA512 a00d4605c1320963085c99282906ffb9a1e24c0e0c7fb2b27002e9f222862ead102476620d46fab74e81ee34e1fa7f289d9810ee32e6ec70f1499586176af4e7
  • SSDEEP 6144:QjqfHMZvAcPkBFeuVvIXPA6wS+x6HSZHeCIajoJ8xFYyj0n6qhY:QjqPM5AcBuRCPVceDCa8PYyjk6
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2