Extracted

• • Target

    f9524f52d2e3661b3bbd563988557d315642276af489a599d0ef4c0e88937ae5

  • Size

    361KB

  • MD5

    47f2d718179f905c8891f424bb616cc3

  • SHA1

    f87f9e8511ad2d1e9147713a3059720774113c05

  • SHA256

    f9524f52d2e3661b3bbd563988557d315642276af489a599d0ef4c0e88937ae5

  • SHA512

    08604958c3cca9c6b786b983c91f493307ccef28394f50b570d1542349899f52613f36e21398f7ff58f3bdcda8c0fbe2ff472985da0489df449e5a57379888ea

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1