Extracted

• • Target

    03c9d092f03b568db03ae4d1f214724f2041b6281957c1404156f02a43c5ad23

  • Size

    702KB

  • MD5

    435757d3c3e80723c18c9053dbe3bb90

  • SHA1

    8f38de1a3bf7a3937b712db14f11e8a6d1a3ec00

  • SHA256

    03c9d092f03b568db03ae4d1f214724f2041b6281957c1404156f02a43c5ad23

  • SHA512

    88387e0182d1969f2957e8814383624052d03460d7ef7770c4835504bdc9cb77992dd3c1e620cdb9a9f0e74abeba7e8e86ccb405757e6e6f279705b4be5fa99d

  Score

  10^/10

  redlinemix26.01discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1