Extracted

• • Target
    file.exe
  • Size 404KB
  • SHA256 2294dbd4c4810a541911958cb93040e7502b77d4e9e27fddbe9df1937c80ac69
  • MD5 3e511cec72bb51a26092d69e2713544c
  • SHA1 cf7efecbf831742cfbf7b7b8b667639dda848423
  • SHA512 fc5df31c54a7d85ead52ee65128710d03f836ecb34a736d49a5d2c50d1bad7400044983d7ed94f01a623ae897de180c51d0531cb46dbefc8990939946a09a11d
  • SSDEEP 6144:tQPnBd/huMR4LOqsjI13/P0GSoG5oqFXEJXCANbL:6nTZuMqiqtPtSo+oqFUJXCAZ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2