Extracted

• • Target

    e46fc4e321bfe51feac08f828c82812f88f2904cce26e7ee0e72b7cbc2e08445

  • Size

    363KB

  • MD5

    3bc934f81e349b1443bcd23f4c0b31aa

  • SHA1

    1758fbc0a50c6fcb5eed25b566bed8c1ac7abd01

  • SHA256

    e46fc4e321bfe51feac08f828c82812f88f2904cce26e7ee0e72b7cbc2e08445

  • SHA512

    6bf8010eddd0f56f202abc0d1439ef506c8dd81bd18ff73dd7595c6b9465b163ac28ae6c4ddfa06579002a973b65efd47336db1a36e06cb49ef468829f6376a8

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1