Extracted

• • Target

    d089cae89a181d0447fd742dc1ee3d3d111e0a7255fd987e37d10010ec4b1930

  • Size

    362KB

  • MD5

    50b46b1a2cae29f3b3f3f759c913c2cf

  • SHA1

    bbad81ef8ee853e070579f006097b7421b3eedf2

  • SHA256

    d089cae89a181d0447fd742dc1ee3d3d111e0a7255fd987e37d10010ec4b1930

  • SHA512

    e5bd47c32b6033fb91bccd7d970ccfb2ffdbf3628ff38ca073fdec634de8886361ee1fd4376a726ff0301ec53dddfb3f2be52fa77b5ac4d8c1405618effcd00d

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1