Extracted

• • Target
    file.exe
  • Size 483KB
  • SHA256 2a7b4330b0f92e2f07a053d2e4da5bd28de34e736c37ca7d799642519f6a6ef5
  • MD5 ddc7b73267a830986bd3f88d0fafc4aa
  • SHA1 1f2f08a4d88ab0492855450f5ec5ba8674d06f13
  • SHA512 71461cde0ec1924cfe1178c6b1041623f3e33ce2f87d595ea5ac578b603cff16249e740da94b9c4a5cf274605fe475b893a98fa03c9b08c7845ddbe47c1056f0
  • SSDEEP 6144:HC2Ii9FUmevAO3/JRfSmW0Y+JCungaItjX9O0KnK4SjpPnFwCLLObfwB:xIi9amW/JQm9fCk1W0exqC3O
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedozkeydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2