Extracted

• • Target

    624c8b864c1d513f8fc1610167c47869e90bc231fe1d2c8a02715b5fcc41d50e

  • Size

    362KB

  • MD5

    e5a58a0827713464c09e91b316f84afd

  • SHA1

    0144e4c4367f365fd831e1d2a2d4b2a74723ea7a

  • SHA256

    624c8b864c1d513f8fc1610167c47869e90bc231fe1d2c8a02715b5fcc41d50e

  • SHA512

    5176d4a84cd9bc1710ed8529a04ee8e1b4528f56ccae2fca73182648d9a989ebb43e249ea640a32001ec3766803f5138a06bacf053a241cdf296405e54b439de

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1