Extracted

• • Target

    988ccdff9d78c10688f9ff8518ef885891e3d33538ea0fcffcb578ee25dcc6f5

  • Size

    362KB

  • MD5

    1580e1273f464981c3efad0a4fc39816

  • SHA1

    cc0dbc799b24c4751254c4eb120dd37d0e62ea95

  • SHA256

    988ccdff9d78c10688f9ff8518ef885891e3d33538ea0fcffcb578ee25dcc6f5

  • SHA512

    d9ef1516931d8e2751a2865fdaa035d87308abb8068851e053d86bbfe19b8cea7d30fd351de24bfc9a18ef8997f0c6123e239ac05c7f824fa6e92fa8e44199cb

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1