Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 4e37f564c60b47733e8716fb8d2dbff73102b1bc30848ea97f7b7b83ffcbb8a2
  • MD5 40f962879a59b2dd2d71859a4c3c663f
  • SHA1 ddafc6f744e154b0a8b47c72040acb694575f5bc
  • SHA512 413a43b22ee11dc1a1158cd33869243003249533d7a72154e2e2073f78eea743a5b7a43109b0e201afbf08b6df23ec7ad3eb4d2e261194891572feb9e22e18d7
  • SSDEEP 6144:dsie9t/cPZfObPBLwZ5jVxKl8JRggsr5vxnd6scZmPkHxHK9O3w5:+iKiP4Pt+5jyZgGd6simPkHxq9b
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2