Extracted

• • Target

    b93c0b973ec252bd22f579540d79cdaf9c9276ab49cf0a72c24dd53947d70d66

  • Size

    363KB

  • MD5

    346ea5fdb2aaf7886e4ea020031ef2f7

  • SHA1

    1ec00cf13359d2393445edd7fae1793a2a930da9

  • SHA256

    b93c0b973ec252bd22f579540d79cdaf9c9276ab49cf0a72c24dd53947d70d66

  • SHA512

    6cf98b72fdcde44fca0a620eb8cd62f97e2b25e1281ef8605580c8ea347e37434b6db9d4263eed3eb5533f828920387151964271e4c256e21831e72c6da40cb2

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1