Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 c922485707edacee75b658d66f0815a08c90dc2deb11e32e3cf2665ff1cdba9c
  • MD5 73c54d3ff887d8b51b77b007db86cb80
  • SHA1 d25b841bccd6ebf585304b6e929df91b217cc8ff
  • SHA512 4c0e618c5f7bb65aa3410aefc2710068baa254acf583c67dc46530ae51ef7f862f6b0faf07ba46cea55016534373fc7d7a8c276e01bb76498740792f75d66ccc
  • SSDEEP 6144:qcOjsjJBu2dwdFUouA/q8i4NMaJ4eeTSNvcPlmoqCp7BC:ojsn+uA/q62a38oD2
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2