Extracted

• • Target

    dc7e341aaf54fbbe267b0361d9a7287a9ef3b823189486861e60b0115d896fd5

  • Size

    363KB

  • MD5

    87fdd9d30c74602f969f1aad0c6c522c

  • SHA1

    5a466cefaab161c45e23a17fc8e9a66c8bd22c45

  • SHA256

    dc7e341aaf54fbbe267b0361d9a7287a9ef3b823189486861e60b0115d896fd5

  • SHA512

    3fb98a9e8d0d704513de8a69126af2ead97e6c5f19d34715436640c86d46c84200ab0c5e937aac746b432fb682338dfdba89fdb3ada11730de1e34d627b0d007

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1