Extracted

• • Target

    50928a79da7e21f091bac9e979db81f19cd2035fcf24f81042354b79a92b9031

  • Size

    363KB

  • MD5

    d0b1266a44b46caa38cd36942b67c08f

  • SHA1

    c3eb0d89da79f47eabd43dcba0822d59d964bf4d

  • SHA256

    50928a79da7e21f091bac9e979db81f19cd2035fcf24f81042354b79a92b9031

  • SHA512

    a4ea80a220a58921f671b5ba96b12a2bd324612e82188d1c93daeb73fed18cf4d07477b6de5ffa0c04baa964f9b638a27c5cbf22e3188a61da07879b6e8dd4f4

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1