Extracted

• • Target

    f1b771122976425ad6992a1212354f18f8b5a7c4a89b787157890af4ca05a2c4

  • Size

    364KB

  • MD5

    7d3755f0648cf7757c9f4a3aa126e876

  • SHA1

    b4ff0976a136a60c9313bffa6ea59a41a99244ae

  • SHA256

    f1b771122976425ad6992a1212354f18f8b5a7c4a89b787157890af4ca05a2c4

  • SHA512

    70a63d19d19f18d5e17a79600a9c52752b64226ac39d0896f2eba1ddfaea9a182ee593d10302bca51ab3fbf4488b85c4c0cbee42a1030206aebaa920349bf8d0

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1