Extracted

• • Target

    810fd22527e5ff16a8dacd522b34e28bdf73ec4c3df772db5ee9de7cc897246a

  • Size

    362KB

  • MD5

    1a5f6bf542df81f0094630ae00de5863

  • SHA1

    8e0279ba41d7ca0bad862867bfb7df4d54d825f1

  • SHA256

    810fd22527e5ff16a8dacd522b34e28bdf73ec4c3df772db5ee9de7cc897246a

  • SHA512

    7b2acb4083cb5f153ad8e3bcc0538eb78396066794c2fdd13c33099fc2874d293725530923be457b19e7940a7622e3e8ac795514d1fed67c81fba4983288464e

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1