Extracted

• • Target

    df2fbacdcf8132bd3662ea06201f7540a6a36008a71a2df0b578c3d8eb9a4fed

  • Size

    361KB

  • MD5

    d7c537699e6ba01fbd16a645c7463349

  • SHA1

    afe07e37e87ef0d744cf3d07bd16c99294d57511

  • SHA256

    df2fbacdcf8132bd3662ea06201f7540a6a36008a71a2df0b578c3d8eb9a4fed

  • SHA512

    5e5bebda98e0b035d428c21f34157f460de9b69566e80b34313b116661d2f3e891bba4925adc4479ed734c8ed0656302050b42d1c47b55ed53aad2b186580961

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1