Extracted

• • Target

    2c9396661e0c507277ab02520b57c38fc15f67b77c6b02b5006407e9335b2ddb

  • Size

    362KB

  • MD5

    278b09ca19f325fd97650df083ffe9ed

  • SHA1

    24a71d643238d76b91b00a7e206d7898b5b1391d

  • SHA256

    2c9396661e0c507277ab02520b57c38fc15f67b77c6b02b5006407e9335b2ddb

  • SHA512

    5f66e6595dd0f10a316c1f06275976c12de8b5c75da9d18cf88ba92eb97dc6173a7e68cd254b7e223b3ece206d1735541ebc4490279f914363803a1c44df9941

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1