Extracted

• • Target

    kp495600.exe

  • Size

    169KB

  • MD5

    596f61775ff6cfd7c59611bcc7e611b4

  • SHA1

    3916e6ab068e576f012fcd040dce28675567b82a

  • SHA256

    4184a645c1fca34bb934946722e35bb54732189e6e8108647bbdbad562239bc9

  • SHA512

    bbd07d320ed37a378d4b331525762d15e94cc61bd1554e904f15882e385ff4af7d9189adb45cb48b7329a39b7efe78d322fa5363a74c1144eb53683542951400

  • SSDEEP

    1536:txwbf4Hr2yqlVZRGWJqFrd/twAjq1d+jh9LY1TGqVEbu7zz401B83wYkq8e8hI:tSbfC2RS/KSMdY15qVcQz4SBk8e8hI

  Score

  10^/10

  redlinedirodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2