Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 7823f338e60f3f64becb7c5dec72d14cb2bcf8de10e0ae2745eff7be66027f68
  • MD5 8139ffde33b829b07f5119240b05c871
  • SHA1 6874e660f86903268b12c84ab4bb58f0a5bcf254
  • SHA512 0e2081ca93b4e848cc56e91cdbc9110531e2123b5f637e71d628c7892d667c18df0ecd9d285b8980946b7e3d759a6fc70bbd1fe0fff3565ec8df35cdcf680f8b
  • SSDEEP 6144:Tiy4atlo/rcOa/MU08/ClJeQp6Z2FlZg2SM+Z:TiHnJaEBE49Sx
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2