Extracted

• • Target

    f53308bf5b115cf2323ba64d4583f171962bc8155897cd4ccc72c5227e7f218e

  • Size

    362KB

  • MD5

    71aa777f27c59d8e5afdc2388415a092

  • SHA1

    4cbef4a2757e3392bd54d3d69f73b564ac18ed37

  • SHA256

    f53308bf5b115cf2323ba64d4583f171962bc8155897cd4ccc72c5227e7f218e

  • SHA512

    faa109ec64c0a47acdf7a895f21f23e35b942e421679e35576c225ba289bdf81bff14d8fd5d58958f4af689ddb0a20c713d2ec83595ece4946864a0ec8b31c58

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1