Extracted

• • Target

    4adcebc3e1de06f83c4032b8254ca9b78fcae479345dc96dd221076113877534

  • Size

    362KB

  • MD5

    e3fe2fb70055f6b7f424040ecddf7a5b

  • SHA1

    b68d4b45499425eb270958d1339dc2b2d3755f25

  • SHA256

    4adcebc3e1de06f83c4032b8254ca9b78fcae479345dc96dd221076113877534

  • SHA512

    555a6f367eac405768ef10a217498379444ca7f4af452fdce8322845d114ec3d8cdd440e22990b194ebc504ab3b31a3288ad215cc99485e6ea99a2ec95460a82

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1