Extracted

• • Target

    48370752b4d74205863b5c3e7fbe4d7522f0e55a6f8453ef0ed482ebbd1b9ca2

  • Size

    362KB

  • MD5

    e717ccbf02881cc4c0e1dacb0055fbe1

  • SHA1

    f50f6041fad7eae8afb8ab66833f2dbb0646d5a5

  • SHA256

    48370752b4d74205863b5c3e7fbe4d7522f0e55a6f8453ef0ed482ebbd1b9ca2

  • SHA512

    3844cc18a7ebca024f1698b84b3fc2b8be50e3a440e11d8dc41048df59c61e6ef587d77a9d81eda02d661c4f6aa38ee8ff48374eef26cb6654d0597cd6dedcb0

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1