Extracted

• • Target
    f8.exe
  • Size 264KB
  • SHA256 f65152edceb657dc8745194f2b3f0c02ec64b82e4131fe6859afadaf4e39a87f
  • MD5 dace17f865a1d8fe64b527125e7b9694
  • SHA1 f8dce1d0cb66947b49021fbd4c26282d95fdd11b
  • SHA512 6f8eddb0aed91abfb2fd1fd42105bb8ad6c2249e26669817d665386c8f946965eadde11cdafa437568457a3647f529ead1a15f40dde25c651c819fe11534e8ca
  • SSDEEP 3072:vs2/e4Uyd4SnJtByeWOWhmkIPmVtxsKRIH3Crpq1brlz1Zpt0xu:E2m4UyOSzNWhmzmVtxsByrMbrlzr3
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@ididjsjsiddiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2