Extracted

• • Target
    file.exe
  • Size 333KB
  • SHA256 fa05f5d0100931b4c04e39b54ebdaf8d402b21de685e7790cb460cfe41b6d10f
  • MD5 03c7935b6353d492f759a5053bda460a
  • SHA1 52154e8ceac64db758e545e58134f98ed25da1dd
  • SHA512 6c69f6e28943e654e9e457513597d19e74b308c9a6c7737ccd7624213b3457458fc8e5a90cc42930d374bf8ea24d8b3f0ec42216740743f05bb4ec04f4cc896e
  • SSDEEP 6144:wF0LttCBKtiKFuo3YpJWJvR0UkNsIy6/bIZU:wOBtDtiKFroJWJvR0iIy6/b
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2