Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 84bdafd2d96535a4bceda05a5bd33db34929a1c7c6519237a9dd9b9e399641c8
  • MD5 b19daccdd18a88450c7c5309b516db30
  • SHA1 3002a24909b6a83e83cc25fdaef1de45b9b78d43
  • SHA512 94711fb0bb6df967f1f1f452fc72c8a5aa2ec8dd123938e02df0a0ea3f00263a75e88575582c00d8170466909d686f274bdee6a72de931370505700970ec5c58
  • SSDEEP 6144:BzdGljCLJyluyMorcfSNkiMtfo2w2WcU3XC0p160B03H5MW:OjCwlT9NMtQ2Kp160BQHG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2