Extracted

• • Target
    file.exe
  • Size 303KB
  • SHA256 da5c4dd49963ea136de1efb1f7c8c5849f1da08ee33a6064be5f1154daaa3d3f
  • MD5 5c7b4ad4c5a2e52fcda11d33303ddca1
  • SHA1 7e0278318524ebe5b3035bc8806e21b97fe4cfa4
  • SHA512 66953c4e130d57e52d29a79d2dfc55a37b6b9ecb69848845aea92f0db6a14a5d0211aa94af02da96ea8bca684e6df8878cd31396527d6c684812943846c7b715
  • SSDEEP 6144:rcoLD/PlHjU0kF0wX42++KNz+GaLW2z5C:4ov/PlHxkjg+KNzSq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2