Extracted

• • Target

    4fecd7b52c83fcf810f65b4c0b4a726306effb83a342145def42e06cc64c839d

  • Size

    362KB

  • MD5

    2b5d80fde587e357f53b1bfdeb5b8b46

  • SHA1

    677679e945cfd5c0f73a7db7cd1fce76c36f1823

  • SHA256

    4fecd7b52c83fcf810f65b4c0b4a726306effb83a342145def42e06cc64c839d

  • SHA512

    a45250478d71265219d654a5de6a648f91d06a3ea5e8a4709df82089989ef824508a2f9f2d8be3d816a2312356d3c525878bb24a29dada92b941ec15b47a43c1

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1