Extracted

• • Target
    file.exe
  • Size 352KB
  • SHA256 116b4fa2541f40e452d7aa04de03095d97a8fcb5d2f118ec60b112e228d42062
  • MD5 745628ee56865d0007177ba0c2ca68e6
  • SHA1 4a9df4f0697895f20b16a9694b82f8873b719069
  • SHA512 d681a70c57df7be82035b87e2b260452454b0cc1fa2704eb2f82c2b70a373ffd2eae391e8ca13dcba6d79eec9db60dd35c11d6999c338120ccaf5dd0220a5633
  • SSDEEP 6144:JsfI5Qq6biGQXqRvj/Se9RK3qBOqMqd9RbVdfOPSS:Jbuq6b04j79R8qd9NXOqS
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2