Extracted

• • Target

    17e8de6d31d6e1890b0704ca528aeba8ff9b5d6812b817e37759d21f572d0b45

  • Size

    363KB

  • MD5

    b1422b6b4d0870ece6af077ad531e1a7

  • SHA1

    b27e9d3fdce8619aca76be8098b173443708f6aa

  • SHA256

    17e8de6d31d6e1890b0704ca528aeba8ff9b5d6812b817e37759d21f572d0b45

  • SHA512

    81878b4cea75a18632f01017babe382d5629dfc452cbb422c02a3423ccfd5421875bab838c41f547d30967ab3a71fc6bbe3ca1f54d7776c41903e2d1ecc995e6

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1