Extracted

• • Target
    file.exe
  • Size 470KB
  • SHA256 4eb2ed0c5a97c02116bdb6531fda7c742a3a64d7fa2a15938b0e9f42a7ba7b2d
  • MD5 4dec218e641a09710cff1e3173926d87
  • SHA1 c7c309db0cc3eb88e594e4734acb5ffab6a399da
  • SHA512 0e6d121fc6600bf1864dbaa680079137c4c67ee32ca51427b79d3ba71a6b9ab2565c64044d69107b2bc867af8182d0d4f0db6b5c1632a2eebc1c5a3b86303d01
  • SSDEEP 12288:LTxR4dTBSuPOjLye+8PM8p7HMB3zzSEK:LP4ZBSuPOj+8k3Bjz9K
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinetestdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2