Extracted

• • Target
    dffd68a69fd2db50b794570ed27fb97b.exe
  • Size 329KB
  • SHA256 c60d7dbb56c7ee282684d03a3665b50ed66037631677cf5afb53fccd18e2bca7
  • MD5 dffd68a69fd2db50b794570ed27fb97b
  • SHA1 871e2cabfa9ee3f373cf6384d924defae9c8ee28
  • SHA512 8e4ce88f24058d08d4fb6df82c1d54fc20c23a38a705e9b9417a3279fe3c2e8df458945c457b2b67c90f01f39ad7ed953734d930ea009f063fd5330251a3eb76
  • SSDEEP 6144:ZjiviRgpWY7hXPY96MRlcP3Zq1Tr1BMETeRSiV8:IviRi7h/YlcP3Idr1+/
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2