Extracted

• • Target
    0b1e13c771188a515ea4ea30b8d766ab.exe
  • Size 392KB
  • SHA256 5381690d532b1bb3a23cb7f58bb769b6ece2105541f93f2bd4b33621d2c89cc4
  • MD5 0b1e13c771188a515ea4ea30b8d766ab
  • SHA1 534a641565e23070d7c4d8759ff6ece56c088216
  • SHA512 13a539c4a59c278fd659264657c5442190323c0cac159f33098f11c01c3d13acebb9b8c939c90e6db81bdda1296589a22be521facff3be779a5064e2ca2a5f00
  • SSDEEP 6144:w4WBhwmLwjVR9juLRXoQIUzAyRzIanmDKHj5e1lwEoPJWwN:UBpcjVRK9NDzXFIfDKHFePwN4K
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2