Extracted

• • Target

    47e27edcb9be738259f5c3d81423c613

  • Size

    395KB

  • MD5

    47e27edcb9be738259f5c3d81423c613

  • SHA1

    3974b52edd4a1b1dedc6c2dcb308f735e444c131

  • SHA256

    2a103ceb37522c1bb5f9b6336e52c3c8341b15276bbc44149ac65d26375b4c1d

  • SHA512

    7144947aa0f4be257e444e6e2bf61797b6dcdfd2390a46a5ceec17530d4f3b8e8139e3648d63aad35bc3d81e39b98a4fe2e12597d927e5144e1e3e05e0d42a58

  Score

  10^/10

  redline3discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2