Extracted

• • Target

    8f2f13b2b64650caf2796354fbb7f04d4a09a68f33ccc1cc2a8ed7b57ec0a6f3

  • Size

    360KB

  • MD5

    bf7b2d5d16a85b0a95509959e8796932

  • SHA1

    5c2e013d07cc42609c4bd91c393412358f73456b

  • SHA256

    8f2f13b2b64650caf2796354fbb7f04d4a09a68f33ccc1cc2a8ed7b57ec0a6f3

  • SHA512

    f06b2cae44d6fc5db7416e3106c59b6fd083db68327794bd9a66b0229cbbb336cbd32cbd0d277acd55c13656c55e0a48097bf5c03819956f146510493631e37c

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1