Extracted

• • Target

    66818fd25040845bcadad135ff8c0f06fadbb5b1233366ac2cd8de8f6039e0ad

  • Size

    364KB

  • MD5

    892d91b1b10072223d61bc60d1960e41

  • SHA1

    76f1616a2f7a16a1183f0f12e175314b58c00adb

  • SHA256

    66818fd25040845bcadad135ff8c0f06fadbb5b1233366ac2cd8de8f6039e0ad

  • SHA512

    480211b3b922e626f31029ade81a813f74570945debf4185802b49084c38c8a5dc11995b02b96d486d3ec5b2e6de5b17a348be529477600558b25a1effe3e817

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1