Extracted

• • Target
    file.exe
  • Size 318KB
  • SHA256 f1e100b82de1f8abb1a8de5c15b033e2e8780ed052b545d7a6872ee307478833
  • MD5 a6a7d0c82f63d3e52a170f5fd7cac77d
  • SHA1 72bea5aca82ce19488892451e99b9c747f662968
  • SHA512 b44498df7e14bf2af15d5342d316ade96a7c48dccbf27c1dad2bab18bd598fb70a91587d1e0eee93c2dc3b4877e2cc62f18ca413458ceb03c3b3745f3cfd7a76
  • SSDEEP 6144:b0IxEevxFyhPMf626my9FRn1kqdiS/U8dKKzgPTH:4yhv4PMf62wZoSHKKzI
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops file in System32 directory

  behavioral1behavioral2