Extracted

• • Target
    27dd08d95b0ba699f7938eb299155460.exe
  • Size 175KB
  • SHA256 fc71ffee5ac2918dfdc256014dbb3533ca09771b17fcfcf1ed1cb3d4acbda8d5
  • MD5 27dd08d95b0ba699f7938eb299155460
  • SHA1 85a7f9c295cc1bbe1a6957a1f7edbf277bcbc418
  • SHA512 8a888a7709ec25b47a7e5cd4b7d0b5df752d49b1fff2796c9c2813d8108cd3ff18cdefab9605d530acfff8749324f6876271416303ba8cb41be56a18ff417417
  • SSDEEP 3072:MxqZWDXaMI5ZUgNHClXJeOCFNhsPxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOP:iqZmgNH0cNh
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineglobaltrc20discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2