Extracted

• • Target

    54be56b40040f7f314a6bb66d05487fd95bb3ebe82b6ca97eb70870f49beff0f

  • Size

    361KB

  • MD5

    2335bc9b05bcfe4103ca57070947ad2e

  • SHA1

    adb95dc05a2348282975990192c7c07bb0b46fe4

  • SHA256

    54be56b40040f7f314a6bb66d05487fd95bb3ebe82b6ca97eb70870f49beff0f

  • SHA512

    3a68203d3c6279df39da03c3118fb6cb1bd1b851c0fef33320cb7d1e27516a50822c3748392dc6a1b1a63b89c45138cedd898cff32834973e32374c96eb14df9

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1