Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 5f49ca114d2ba10de5629c28aa3c166bdad009b225ca0039bb79e07bd8ab9bfa
  • MD5 2ff0a6ab444dc7e05ae227c15bc50149
  • SHA1 9405c835753af96cdd250c6bbc32098fa362c047
  • SHA512 add1eb8bc51164616191b99303d043a87aee17402e9f2853305470767a92c35db86c65ebc9dd2ce7410ded5c2fc3777aefda90e471d7a7e085564a5d7f8b3e2b
  • SSDEEP 6144:l2qIJMZY81QHwNXR0BHCFz3csglVZPS7kt1nh7QRF98AGwGTxuV:l2qiMG8eQNXReHCFzhOPS7kt1w9tG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2