Extracted

• • Target

    351a357e5ffb6c59622837e92c266afd49d91238e3b1098d13c605b8429f5850

  • Size

    361KB

  • MD5

    80670075d604aceecac219e8a0aad4fb

  • SHA1

    dc428c42c7a124c857b9c22e2f2eb2223a6bced3

  • SHA256

    351a357e5ffb6c59622837e92c266afd49d91238e3b1098d13c605b8429f5850

  • SHA512

    4b9401477807b5bb0157321e49301ef191298c0f1b727dd4825b3ef2c1f27bc651fd79da47a3b107b1ead4dc354554430dc044e99c7501c403f7630e598ec374

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1