Extracted

• • Target

    20ade09d9a9d596882a93422f7ba4c82c5ff53f349c9f45421c599c09e2ab089

  • Size

    360KB

  • MD5

    b810600c48165f39c68056b231720940

  • SHA1

    838366a25be4cb610462a34ed2ffa07bb02f581f

  • SHA256

    20ade09d9a9d596882a93422f7ba4c82c5ff53f349c9f45421c599c09e2ab089

  • SHA512

    369a35c035af44b783849cff6e6744fcaa30ba5d6552e8c3b59a6ad4280c8da790cb62106f60b804f632a0d67b9fd43c2dc16e5a0cdc9f807c8cab6749feac99

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1