Extracted

• • Target
    ed98d89ee3ff45670756e8dda4345b62.exe
  • Size 175KB
  • SHA256 18b11eae56eaa7b76512c5e88aae06fda4faebbd477c01e837f5ca1b3ffd1985
  • MD5 ed98d89ee3ff45670756e8dda4345b62
  • SHA1 d8cef7e32b2261447f3e53617a1d53647e4dae6d
  • SHA512 7d89e36c3b79f4862da2f4a39c29b96c125b72a94e2ac2e01a1327f2930d04bfaa853abbab789dfd2b8e9de8105c943731da838ea9efb2d9133292304297058a
  • SSDEEP 3072:KxqZWJBaKULo3xj9peT5FGhMXxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+O:4qZIxjeGh
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinegonkadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2