Extracted

• • Target
    file.exe
  • Size 384KB
  • SHA256 853621a1b8acd0226410a62db92e63dacdf23b77a7bfdb17ac87b72ea8beb1e8
  • MD5 d884131ee2f232c20243851bb6c73a31
  • SHA1 d856b986f0cb9efd2e8572403d78e3e1d2ac4df1
  • SHA512 5ca12107300237b306a10ca50a3ec9ae614e2be25c7743f650ec7e30c7d42b6814829425fb27c3cf184e495cb0e1dc14de0838af672019dcd6c0001f33242b72
  • SSDEEP 6144:EDnjLYSO7BhzLi/T7NgLGDsPa6mgXT9WLROi0VzJTyTn:SjES5TtaRii1JTCn
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2