Extracted

• • Target
    file.exe
  • Size 429KB
  • SHA256 06d16eee003823c9e1fa3c4ed44cfcac012d197ef1f1447555af9535d6464cb6
  • MD5 1b7a63c62801099a9c29a92e5ad4e452
  • SHA1 af3b8949b2b51af2304dfb34eeecfb8aa979b678
  • SHA512 0e9eecbdb43f24b018ca6bf0ab87b5fc1517f56fb46985abe2bfe58eda39bcd8cc4e36e77abbf03bf91ce547186fb05b417bcda05a3ff3b4b79e8207edb34c03
  • SSDEEP 6144:+Iinc0oi4/Fryi3PhWEk3iQL7IEvOLdfM7IMwZluigkcU5N:Yncq4tr0iE7mluYN
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2