Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 45471c75fc5e373f9821ec450778c12dd83e9cfc652fa791a0e73bfd3aac69b7
  • MD5 f4fe91b171a804a2f7c68ca5472f00c6
  • SHA1 e7f5f52e1d16dbb5ac7d4f92aaa526a3204b8da5
  • SHA512 e3669b5e18a81277635d16d724fa3f70c17fa43ccfcf06ccb76b544c06ffa9379340bede642f4314fa49746e7dee30646efc89b5b0c9b6b6fc4935bb2412fed9
  • SSDEEP 6144:cEiMqozmaHOenuZITGKvvl5BmspqGfyKYSrT0ICTEdHUNs+R:cEiMqU/umuYFl54sphfrXUX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2