Extracted

• • Target

    5e51ff771292d383b9942ee310a0df1c

  • Size

    389KB

  • MD5

    5e51ff771292d383b9942ee310a0df1c

  • SHA1

    7bfc60c43aa71cb52ec9d09f59c1f28ae784658f

  • SHA256

    532ad0ae1e8256d6a9bb94dae853f8cae2d497999070d4d1e26a39e046032548

  • SHA512

    f972a31249ead48954055c5687371c441edf9786a03ee76c93b57c9f5e737d84f74a91f8dfb90a306ef5f388424c9436097e28edd41b5f8eb0fd1cf921176884

  Score

  10^/10

  redline16.06discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2