Extracted

• • Target
    file.exe
  • Size 482KB
  • SHA256 049b29396a93de08a9a598a8dff3cc39bb2fc1188ab568b90447c79fe079d31c
  • MD5 630466a7abb256eee19c7de3772de2f7
  • SHA1 af478049e6be1b4586cf4b8da45454e8b14d0cd0
  • SHA512 f5308cf9f348092cf10118d2968d46bd38a06171da5776d5af5f5059af13d567e82ac639fc93397fd2c31238ec83c4bcc56401044de5f80808c1ad040fb4dd21
  • SSDEEP 6144:i1kfBQi33W4wri5hC1FcUW0jb8+WcwTm7jpPnFwCLLObfwB:iKBQg+iDKFnjWcwTYxqC3O
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2