Extracted

• • Target

    c262e65ec34614e36acfc1bd0ace91d0e8b259b624d268a278a1a7b38fa22966

  • Size

    364KB

  • MD5

    01f31beee1cf7704b24eb4687e3fa063

  • SHA1

    fc2e3dcda1e012a6a6950444cf032105e83aa448

  • SHA256

    c262e65ec34614e36acfc1bd0ace91d0e8b259b624d268a278a1a7b38fa22966

  • SHA512

    438cb1e3e5e1cf56839cc412e7ea1b07927f94b03e4ec23215b5088bfba68bc8bf781a345710d44393e1fff752cb5d8b8b601361ba751e42a94a06e2dcb43927

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1