Extracted

• • Target
    file.exe
  • Size 405KB
  • SHA256 1b2200cdf4af01b86933be916f5f70d6a0d0fe1f4dee8835d136ab0a8f7a3973
  • MD5 171d1da2ed57760eb018f0f57d6f0829
  • SHA1 b236c2c0b075323c3e472005f9c81361c73189fe
  • SHA512 89d0608d757bbe525aeff8ba41236eea476beb37cb9dadaf7923e9996f1292b53687af25db7cdd5f14cbd376e193a289af7768010e5ba4d9b412c872f1957e42
  • SSDEEP 6144:Bqgumzd0nOH/9PiF15f09W3TQhsNiqrlsIBNIr+31N:Bqh8d0nOHlPiPl08DQOiys6B31
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesukdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2