Extracted

• • Target

    5d7dce8190bcffd0ff65cc5fa0bdc44bbf05a63b58d37778d1c2c8004b737b79

  • Size

    362KB

  • MD5

    1d6f345ad37b542f5e5a1d8e3cf18573

  • SHA1

    819918f1ef0bd9501b476febaea776e99bdf1e45

  • SHA256

    5d7dce8190bcffd0ff65cc5fa0bdc44bbf05a63b58d37778d1c2c8004b737b79

  • SHA512

    2bf570502d3d652901dcd24211396eca80c8f7fee6387e20d1ae702095f2e9cce9f589cdd6290c169d42012608465a9d5d176efb9ec173f13363421c70065980

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1