Extracted

• • Target

    69c12ea952d80b3d089b15e30e87e3a32b2ed38573fe515fb3806dba3261e56e

  • Size

    363KB

  • MD5

    b0f6964c4b6ae523d74979c7387f50c0

  • SHA1

    23ca064c6a661a001cdef371e9763710bc43d34c

  • SHA256

    69c12ea952d80b3d089b15e30e87e3a32b2ed38573fe515fb3806dba3261e56e

  • SHA512

    07b85aed85ebc691044cbcf27c2acaea59c470ae21d8f95ea47d8b620e7e5b733936636bd7ef066ce4a071b17ec715e534adca36934463833864381056983e42

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1