Extracted

• • Target
    file.exe
  • Size 293KB
  • SHA256 1688dc9d9147e95bacc1b2a5ba0b3f48aafa697e7afa9795d94eddd842184fa7
  • MD5 fbf5e820015beac1f784c6db854d1dc1
  • SHA1 23980503881ceac05c66a45e77494aaed5e2303a
  • SHA512 680c4b3e5ac872592684479335098f22f85ce12bf17bcd3a152c15b61f4f6ef2c9b626f6e0e2eb7490e1b3a45a8c6ed4ca0a4a0327cfad86738ce902ba75a07a
  • SSDEEP 6144:wc3fwAmAaVXT3ud4/eTc/IjJn0lwRPiS0lWYI+:wuwxjVXTx/6/Jn0GS
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2