Extracted

• • Target

    9cba715127763894a7bd190ae1c0708bdf245290f8ff049825a358dc557743e8

  • Size

    363KB

  • MD5

    7180cffb0a04d622151f58ff2f9a3c2d

  • SHA1

    883b88e67818ef05ef74dd067784e25e9101b0a6

  • SHA256

    9cba715127763894a7bd190ae1c0708bdf245290f8ff049825a358dc557743e8

  • SHA512

    072bf25284aa365a6a0afb5f0e4132ef29d5e7c8c1242e2bb304c97e08e18a2b118a9b16597837f900a7ebf3eecc6ae695e79dd6a690e8fcfa4a9863bbf8afe5

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1