Extracted

• • Target

    22e08f5e0ae18e55ad3643de068069513ee0d719e6bf703ad209ea05cefc33b7

  • Size

    363KB

  • MD5

    de6bc6f1802962dcb86b431718b13ebd

  • SHA1

    93718613b0adc2391c808b59a19b739c3d5cd04a

  • SHA256

    22e08f5e0ae18e55ad3643de068069513ee0d719e6bf703ad209ea05cefc33b7

  • SHA512

    a8f7db968a2a7ca61c5303d14b8fd153e210012d0ccbb427098afc76aa565568f9eb4ee66abe1102392092f8a391c885c2b1d238c747dca1af03d3ed0355a596

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1