Extracted

• • Target

    6b2aea1c9c403ddbd12e5f2284f35565407a2df5430377ca99afc4cffc16fb50

  • Size

    363KB

  • MD5

    02eb64b39cfe9a3ffed43979e8afc447

  • SHA1

    4a9d6f763b6ca0b01585ddc9c755f01b7f67dd8c

  • SHA256

    6b2aea1c9c403ddbd12e5f2284f35565407a2df5430377ca99afc4cffc16fb50

  • SHA512

    627f4bf8b256a23d3736463604b2545d88a6c507e332f1f835a7dbb0fd6f8fd8531ac2c8fbe3e13494c5c8ece0835fb2bae3ab5eed3f808a432e9769c5b03be0

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1