Extracted

• • Target
    file.exe
  • Size 429KB
  • SHA256 39cc873c10b01b2c0efd1329ee50e5fb5ff866f2ec2f024dff2bf49a7eb4f910
  • MD5 74dfbd969169c93e0656c92349d4fe75
  • SHA1 6f3608871b9fb05914aeb474cc39546bf18e7415
  • SHA512 94000eb5d1bc5da7a1bab55a7b11f2ee32c4d02878e4acc434e1043dc05add04652afeeff1d51e0f1caecdf43e376246b3546953b68f4fb93a5d19a7b349869f
  • SSDEEP 12288:/nheWIWHjOY3BvGgqcWcw9chZ5Z/oCFe:/hUojOY3xqkw9chZH/P
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2