Extracted

• • Target
    file.exe
  • Size 270KB
  • SHA256 7e332993bb155e096895d26b3a6f86e950bb4909d32ef450dd6e45726de5e7e6
  • MD5 331e213bea057e7fcf143f8d5c56756d
  • SHA1 a6187ddd4b93480323394cdc1af6e00b2afee1ee
  • SHA512 5c6ec88ba0805595bf3788a9553804f42f72ba4786bedc181f1aecd8282912d3f63bf65e4020b00ef49a3ada5c0f41a945a77a9e2683d05a548612e7692bc60f
  • SSDEEP 6144:PLOWjBuatnipNv9NxNK+MUVmZkLKPla9MhJF:PVjXlE/K+vVmamT5
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2