Extracted

• • Target

    600262b441ff3bd54364ba80537f3bdb4a281ce3cad7c17b509f0a19e102574b

  • Size

    360KB

  • MD5

    d2781585d435ca8fb2df889b5ec77f59

  • SHA1

    6c66ee23d902a58c81bcfd967288a93d6ca96b71

  • SHA256

    600262b441ff3bd54364ba80537f3bdb4a281ce3cad7c17b509f0a19e102574b

  • SHA512

    3a02f04bc40a48da832bd068956a464cc4e96caf4fc0e57d5bce2f95c5ad1c7417ed77ca55bfd1dc1aea23ad40cf34a5bc632ba0be3ad027de5339de86adb355

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1