Extracted

• • Target
    file.exe
  • Size 333KB
  • SHA256 83c9b03b8c8eaaceeaa9e533f3739dc4fbf6fc6765a16a5f148b9fd300fa4f5d
  • MD5 8a5de0cfb523d72991bb098b82f80c04
  • SHA1 ff67daaa33580750cfb5d1fa90326a10d9b6732a
  • SHA512 1174bf302869ce803258ecda4b2bbaff228220ea593660eb8f7fb122c3dd63659c1a350430b678a8745a762411cfc556f46f8c0abb57600700085590cad351a2
  • SSDEEP 6144:jYLyrqeSV49KuClJmcITnSE5I4JGOYgrgziXXqck40M2b:jYGOeHPH55I4Jjrk2P
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinejokerdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2