Extracted

• • Target
    6dd4fd70660fe4fd43fdcd316521dee4.exe
  • Size 336KB
  • SHA256 66967d49e5d96c09737095adf9f655361955d4b41854662ced6cc2414f780db6
  • MD5 6dd4fd70660fe4fd43fdcd316521dee4
  • SHA1 c1a01f8f0b2cf669528be357e97f7cd6cbab4a50
  • SHA512 4062f3e68b9bcc37c9aec0099d1c9b1bbb0504dd6b7e78effae6be3d0b9380f487b39371a836dc73921d9c01be3cd87e85d78eb755beb95a0c28aa98ebde505e
  • SSDEEP 6144:Op9kwLjqBtcvRRCg+WtuKQpfbHqzvDS0sFDGy5k6h6Mf:Op95fqBtWd+UuKQFbHqzvDwFPlHf
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinemilafdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2