Extracted

• • Target

    file.exe

  • Size

    330KB

  • MD5

    a68cf6c781f0641a46f90f74e6c3b360

  • SHA1

    0d7afb3820972117289451a50c3265d2f672497b

  • SHA256

    3411be33cd514a23e0a799f888ecafdee90ebc724077e078babd340c02b3e444

  • SHA512

    4130d06961486af975648041c9347fb966cc27a61b98576c1e18f1d2753455e1f4152ba01b727c8e19c559c64a57b6195bc3536b8b4f9921ab51e25802f60b3f

  • SSDEEP

    3072:18d4mYAHxbyrcSBV4sKXY/eeBUaN+Z/FboDWrSYU94l0gWk1M3K34zSQReT2q3:uVdygmbCYGeB1C9BrSYq9W/T2

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2