Extracted

• • Target

    a995eff58f9d83828eaaa615f92625fbe1134fdb26829c75bf87ec5875244fef

  • Size

    363KB

  • MD5

    a39dec5f9d3d53dfd15212e14d0a9539

  • SHA1

    3e01fab94f55369f4047418b41b339e8b677dd1d

  • SHA256

    a995eff58f9d83828eaaa615f92625fbe1134fdb26829c75bf87ec5875244fef

  • SHA512

    d98539d374baa102f84175fad4f7753f992cf2a9d26bf2209ad4d2884bda88aa364edbf5866fe15fc4364aeab202d8cbc1d2134170dbcd387130215e4f057540

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1