Extracted

• • Target

    6e1cc86299588211ad8371e85d9d627a81125f6d41b2715f0f5b92f2df23c14e

  • Size

    363KB

  • MD5

    52500acef792c4d0563c3ef778ae831e

  • SHA1

    450fd85f3977b6a2666ce5b96acaef6af9608803

  • SHA256

    6e1cc86299588211ad8371e85d9d627a81125f6d41b2715f0f5b92f2df23c14e

  • SHA512

    16f063a96ce98afdc59fe33388cd3f21bc29d528d1c37221e16e8dbfbba89688d35448524c29d52d07269f63bacc2dee73cdc0c527ec7297e02f93b5912c9c4f

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1