Extracted

• • Target

    ed10216319ce22be4a5cb8671fb140ad09086cc6d3294cbb4ec59be4357195e0

  • Size

    362KB

  • MD5

    f2f4e18fa2484b0c54f7c453cfdf1704

  • SHA1

    02d38f947b1d0e34bd81fd08457b1919452704cc

  • SHA256

    ed10216319ce22be4a5cb8671fb140ad09086cc6d3294cbb4ec59be4357195e0

  • SHA512

    805a7381df85898482e4c1c4bea624bd1ad1136f3a22c7d6c99b2834e65b6f09d711b9ab37cb1bfb4ea6a9e4a27f10015d33562c09c676044b82d524af83da5d

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1