Extracted

• • Target

    f70b9c654eb9afb2da21510f3173c238e3f9003bb8305dd8102657ad361c2bd9

  • Size

    362KB

  • MD5

    134169924c4ad674d3ea8601ebe73a67

  • SHA1

    70d8c29c35d14eb88517d4efcbdae782e70ed506

  • SHA256

    f70b9c654eb9afb2da21510f3173c238e3f9003bb8305dd8102657ad361c2bd9

  • SHA512

    31c976c57a8add03b2c0750847b5cb6319ff218d651fdc577d4fe8290b201cacb0a5ae732c2e1bdff25181bb8cfab47d6d9c6a70bc61b045fec065baac5b85fe

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1