Extracted

• • Target

    7badd71a852d3ea8624a0d88fbd323f8333d342fb142cc343fbadb1e79bdae17

  • Size

    362KB

  • MD5

    ec9dd09f52a88047e4101a89a337a433

  • SHA1

    2c5a6d7d319fda50bc1ea575b645ad1c1984eb08

  • SHA256

    7badd71a852d3ea8624a0d88fbd323f8333d342fb142cc343fbadb1e79bdae17

  • SHA512

    a73e43bc289b0d0b41ee3201442567ae0ca90d18f13e22859598ba91d61a36350015765937c1b7f4eff9afd3676c83262cd4384e0e042673154f2077f101ec2e

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1