Extracted

• • Target
    b0db7b697bce0de68825f3b043601225.exe
  • Size 285KB
  • SHA256 058d85c10de17415e2a2e98c8e0bbaebcc6115f62bf58b2b4463d6a57f894ff4
  • MD5 b0db7b697bce0de68825f3b043601225
  • SHA1 5ebd6797b9f247eb03184789ddb82c02361953d4
  • SHA512 6841eb6a371530bd00e5f41d6587db78e6396380bcc052fc89a84fa081ece51b0354b1ceb1aef4365e6542c3d1c086a5743c7936aea5f3e67e97aef83a1483dd
  • SSDEEP 6144:7LL6bbO9R8uwMIu9L50ZsEoyQ6BaHusKDXF+XN3CUArcPo:7LGbC9Rw+8sE//XcRPo
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2