Extracted

• • Target
    b1e4ae31c84df768e2020056ee02e4a3.exe
  • Size 175KB
  • SHA256 5a96dc4b8d643ea8d09660f16c5e45eabc809ba524715d149f7495a2476ea488
  • MD5 b1e4ae31c84df768e2020056ee02e4a3
  • SHA1 f0b04fc75bde756256325e0020783807c6495dc5
  • SHA512 d10ece2cf66b3179456d2a30ddc4f8fa7a86648a330b8623b5a2b88902b3f2ee7f765e2703d29f1018075d9f34652bff71015a5367425e3b4638f75c1d2190fb
  • SSDEEP 3072:WxqZWDXaMI5ZUtqeX59GhVXxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+ca4:8qZmtJGh
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinetestnet355discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2