Extracted

• • Target

    379b9ed30dee34d61d678e5f24ffcca1b8e94fdf3f49a15d95947ba6dfba2dfe

  • Size

    442KB

  • MD5

    dbc8c65968ed3823a9716478dbd9d49a

  • SHA1

    0a63ad61469fa208cef9d6b1d8c3f9de5ad0a899

  • SHA256

    379b9ed30dee34d61d678e5f24ffcca1b8e94fdf3f49a15d95947ba6dfba2dfe

  • SHA512

    c44f457f6668bded436acad1b94dfab2bafcceb978aacb1f814e06eb65374a3b5f052a7c05182aa898e4fc12fa8c1743d8229c646e49689e8e2fe39b9e83f412

  Score

  10^/10

  redline1discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1