Extracted

• • Target
    f6f0195ed720b27eb5ac065160c3415f.exe
  • Size 334KB
  • SHA256 41fa0edee86cfc72ac4bb3628b3773269038ca1227fe3abe88b878e39c4fdff9
  • MD5 f6f0195ed720b27eb5ac065160c3415f
  • SHA1 d5c1a162ab9338712c94eeb11cffa014da3691fd
  • SHA512 20e18ed5b641ec3ef10aa9ef247ebef3a1834900e7aa5e37f3d9720760be3230f8be17fe4820b17a3fde9c0d5c6dfd9d2a175691f70d5751df315e892d01ad16
  • SSDEEP 6144:aqIvUQ9LRMmdqzKCUIXBOJgCExUfdejYRow9r:aqEU89MmlIXBOJgjDw
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinefredydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2