Extracted

• • Target
    file.exe
  • Size 333KB
  • SHA256 b277a237e0a76b5252ec64e162b3744fb7df26e6e63566eaaeced9a62474b7d8
  • MD5 3b7f19d29d1d7303fcd9bcc67b956010
  • SHA1 85c43cb16a31c6c6e462be0f060759e375189708
  • SHA512 f820bcf3ac6e81e47bab131cb507ccc6bd603a3e798560c20367e94fb478df21bffce6000a4a9b62dbf23a2a7f0100ac101cd554655da72ec920413a80c1a7da
  • SSDEEP 6144:d3gLNZ+sw3iRMNjPxZpbphfs3tferUkFa55HP:dQxZhw3qMNjPxV5NoHP
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2