Extracted

• • Target
    file.exe
  • Size 317KB
  • SHA256 9617d4eefc2c16ff7587d7a85c1f52d23053e02632e9cfc27e0a5eb84486f05c
  • MD5 d46c47543ab771c8d6bd2d7c9ba853a3
  • SHA1 b339decb0fd779a0a7c192d321aec1017808e28e
  • SHA512 e601d8b012d81409005b3b7aa002b2ce4417ae36f0a62f6dba4fdb592f6e730eafb02d1c5adbdc6db800206204b5b30577366e85f8faa3b719ef0dc574917d8f
  • SSDEEP 6144:3D8VwwJLvjFAFoqe6jv3gB5HFV7n6kSw8rZuge6Bhk4GuRfk:3D8V7XFAFa6jvQBlnxFnl6Tllk
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinetesting.v1discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2