Extracted

• • Target

    ae6a8b5466533438b37ca8d0d1183f644f8e28600f55d49c4868f9d5a2bb042e

  • Size

    364KB

  • MD5

    8a7290c3ba7bddfeb739fe4138ea8b7c

  • SHA1

    cedbafce7b8d8276a62c7e0fde8c69c1325338fc

  • SHA256

    ae6a8b5466533438b37ca8d0d1183f644f8e28600f55d49c4868f9d5a2bb042e

  • SHA512

    19400e4e87b35c1508675a7ae8c3908118299251d56645973ffd6802dfcffc36e81b4b86221abc31e892616561e94ba31395b578c399a494c758a54321e8a55f

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1