Extracted

• • Target
    file.exe
  • Size 353KB
  • SHA256 4b821e183fd57320849d7999495a583e0a74ee4bcffd59daefae37534f736393
  • MD5 3c4065e9ac7ff4350d190dcda4cd6b33
  • SHA1 6e26a2a9d9f5e7988f148b9cf270e3972cf0a922
  • SHA512 ea4dbe71f057ff75a54bb5ba27b32a935f320defefbfe75888fe962479b3975d7e8f5be9579b69669f9c1a562cb324a1932f7648fc22ba0c517f13636b971bc4
  • SSDEEP 6144:1I6Qt4QwsdOEcetGRU87bZQAdBSa9UsqigzSGzduirJ:It4EDVtoU8HiySadrYduC
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2