Extracted

• • Target
    file.exe
  • Size 358KB
  • SHA256 883e13b0ee3b095b37bf146fa5d4f0dc428bb68daca717e98f28c769cde5c7dd
  • MD5 3d39b4eeb4cd35c2604a8594d15fecaa
  • SHA1 fb500ad1cce2b7ddb171ab07878da29449ef4744
  • SHA512 1977b89fd1c58f2af75fc82fb71314d2cb14efdaca099de9fac8133d0ad4c1d7cffb7b72a9b9c8b811f4c4a5e6d2df90cbfa85c0fcad54181b233ac63d502aa9
  • SSDEEP 6144:wnkN0phoVNdKaJJjnzaLGnN5CRfciXiJYGtA+0Kc:y5aVnKaJVeLGNsRkikYGtP
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2