Extracted

• • Target
    file.exe
  • Size 460KB
  • SHA256 4c313f3f72094ea68a3e98db6778ce4ce9f38d3ba22e3b4b752a7a95679b1b70
  • MD5 0f01ee95905898526104bac8d0b3339b
  • SHA1 146d9ebb83bf9ced19564f8ab050cb3d576ab832
  • SHA512 977dc30954fd62bbad0c694895dd36c6103c49e208bc897599a3e957e27f96ab3ef8d77cb20375fae86aed56bb84feea6f600c6f367aa2664714f5275b48c790
  • SSDEEP 3072:V3dy1s3sQZ1SG4G668CAGn++Qas77fsi7anwZHbD2AHDKL6JYrLvfiwRcybXd/s:fsQl4rGnAas74tnYhDKDvfdBbXTVBl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2