Extracted

• • Target

    866b299ed74a50850546ab249503257527503ed3184ffb9c486d8bc15315032d

  • Size

    364KB

  • MD5

    04f8f05137be1f467fecc79c610813b9

  • SHA1

    1bfb2807b51040becc0c31b658ebfb1c5507f03a

  • SHA256

    866b299ed74a50850546ab249503257527503ed3184ffb9c486d8bc15315032d

  • SHA512

    f5d0b845f0746deb99732a524bee2315df108900ac92eeca6977af85e5eb5442454e15e7af8893d7dd4db31bdd72cd704c841f74f55468d098d88983c16f0ab0

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

  Score

  10^/10

  redline0002discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1