Extracted

• • Target

    9e81816e4808be07725d360b291e59cea0fb3301d80bcf1b63f83035af00022b

  • Size

    361KB

  • MD5

    6705797077d96cfef7ba766e8afe0106

  • SHA1

    4da96d7d0e0bf6dbabd4fdf08d725fc44130dac4

  • SHA256

    9e81816e4808be07725d360b291e59cea0fb3301d80bcf1b63f83035af00022b

  • SHA512

    addc7a5ebac8998d336d1bcd61366414345836dbde705cacf9874d25c6f7d12e717b2717df9c07c88756f9196618085bc106107dd898170c3e098ae7ad0aa4f4

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2