Extracted

• • Target

    a9534f93d696e270dc19109a9a74dc5e70e2eedc020feb117d4ebe0863b91a39

  • Size

    364KB

  • MD5

    2293b44e3f917f7df7a72df5beb2fd06

  • SHA1

    09c9cfacb933875d6ce7abeeaef82383bf1e2ad8

  • SHA256

    a9534f93d696e270dc19109a9a74dc5e70e2eedc020feb117d4ebe0863b91a39

  • SHA512

    712fee4bef6e18f667b50e4500bf013543bef8fcf5e40f384fbebecf14f1a942172cc9bb9cc2ff815e765c4db22dd30ff6f06ce63ceba38244aa5bf694698343

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1