Extracted

• • Target

    912544a171c8233f1809eba1096ff38db676dd885cf3b438db68ee9d37b34cc5

  • Size

    364KB

  • MD5

    2c4b7c0f8a8bb1d5581ff6179a5ccb2c

  • SHA1

    ff6ec5ce8edaa8d800f73099decec11ea460eff6

  • SHA256

    912544a171c8233f1809eba1096ff38db676dd885cf3b438db68ee9d37b34cc5

  • SHA512

    53a3da14fdce7f1fe49b1365a234f15f2f0629637455bcc75fb9dcc8414b934f3f27bff8363cbd0f711ae3d60c939012443587a2455a34f9aaa0e3dc6b87ac9b

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1