Extracted

• • Target

    7d5a873fac0accd3ab3e1ff59ffe9ef0c38c062792337e5ddabeef8713b2c20b

  • Size

    361KB

  • MD5

    2f2a394bdd46ce73ac5b2c02be10235a

  • SHA1

    c595a8637381456db3875d85d84b1706ecf753ce

  • SHA256

    7d5a873fac0accd3ab3e1ff59ffe9ef0c38c062792337e5ddabeef8713b2c20b

  • SHA512

    76e9aeda019ffec5456a4c81f2de4b2ee579908559642c1ca8fd3e72bd588f72dbab86760e2bb1f83197bcdcb4c935c62845eae19b6ed43f2d15ccabb90153e3

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1