Extracted

• • Target
    file.exe
  • Size 478KB
  • SHA256 97b4110323e2aab7ab3c10be8f06d18e65cbfafbbe87f5ee77dc8cc42f150b5a
  • MD5 28987c96fbc0fb5bde9c27b55c42580c
  • SHA1 db0c0e069806db748d34de9f21095bb86bea8e07
  • SHA512 f1f72fba84f00aee5ea560527787ce1caad21d20397c32f73d76e30bd306199a116c7362052dfa23ea8b4a312d08cbe3a563467ff5e4a2ec051444862e05547b
  • SSDEEP 12288:hpL/3BLg+SyxZcKs4Lo96NOVXhp0fQ1Ew:hpL/G+SNKs0w6NOpLj11
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2