Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 9b86842488d81bd70df3fc70de8ee02e2f8d9c30855bd50a1747d7e2009bdda6
  • MD5 604fd9ad1eda063a6fa4550f7a50be1d
  • SHA1 32a91913b634f4821e1e5a7eb3a26f9f94997bfc
  • SHA512 01d9806ed392b0965df99153d924506e877af4732ee96cdbbb9842cacfb196cb7b4adb57b86c1440c365e212c0a74189e41bbb3f24e1d2daab107f70b86f7387
  • SSDEEP 6144:IqrWQtxgyglKzSyej5Qz0L2n3FsPa4yVQlsGS0jStbQ:IqrdvgyaKzNej5QzUU3AjE71eS
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2