Extracted

• • Target

    cac9ea95a5f88ee9199c34ff9fa046781db81d4efebbf28a7c4897e551b7047a

  • Size

    361KB

  • MD5

    e46fef55f8736eb44942857db88d3004

  • SHA1

    12a1c90b631b294c1bff7c113ec45cae4d2f9d2d

  • SHA256

    cac9ea95a5f88ee9199c34ff9fa046781db81d4efebbf28a7c4897e551b7047a

  • SHA512

    04cd69a1d7bbb32109adc159a314eca9fbbc323e0363cd587e09fa701e1e585c3d71de7b911d128bef9705771b17574b27cd099037bfd423a7811b8cf180e910

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1