Extracted

• • Target

    3a2edf537781db13e56b5bdffafba663c2d53301f7e0c4dda66b5ff642f6b686

  • Size

    361KB

  • MD5

    58162888c5ad64b97f07c1b56561d57e

  • SHA1

    865affbbe5fe8e48d7da9eb7392150bdd89e86ff

  • SHA256

    3a2edf537781db13e56b5bdffafba663c2d53301f7e0c4dda66b5ff642f6b686

  • SHA512

    2aaed2130685f40f1203d76bb6c1210b37f80a1fe3356b6b2357351098c8a7f2ebc91c51c2b0ce2a9cce3d17eb11ad8dd786bdf5b124fc62353466e56613c3a7

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops file in System32 directory

  behavioral1