Extracted

• • Target

    a6e969d0983727b9aac991a9fc8b6d7025bcced1af5bef9089b787b9d55f1722

  • Size

    364KB

  • MD5

    72aa95a262e962ccace03b2ae632165f

  • SHA1

    cf9d9bce3b67685217c6c8dc9f860f722fa62179

  • SHA256

    a6e969d0983727b9aac991a9fc8b6d7025bcced1af5bef9089b787b9d55f1722

  • SHA512

    aec112d0be1d01e6508aae2685bdf579baeeeb1522abef4c2cc0ed0fd0ec4d280dd7cc3b3182113eed4df2f1a7699ae0757bd42a1ecd8995aa0afe31a7de4904

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1