Extracted

• • Target
    i5274199.exe
  • Size 255KB
  • SHA256 79f08c4fd32a89c0d00a0f74669421fa36a7e1dab0fe8ccdb614fafa34cb246b
  • MD5 237f21cf70ee646ba45ef8f25567e376
  • SHA1 1c2c8f4ddc0b7065b1b250fc2b6e0d7d102238b0
  • SHA512 f797418469d79c4c7b4b05bf41bc702e0d1a432dfb8fc2088ebc5ebab3277322af7fc8cf881077b1ad38d9fc8c123a0df270d913f969888b74d48af8d0a63fdb
  • SSDEEP 3072:vMiBIHozcM2o5/rmRviNhLI1fbCeOYTpL6GXraZKegBc4054fxvwXZBa:vMCI22OmqTMraEeFnqCZBa
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineborisdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2