Extracted

• • Target
    file.exe
  • Size 333KB
  • SHA256 d5cbab8e13cae92e74f05be0bf25f70f4738cbf8a20d21ca23d2c13cc7be4d69
  • MD5 e168fc5ab0aa5a75233153af41100809
  • SHA1 f0f4be1f54661fcc9540e6c5a3e7642b18ce2f5f
  • SHA512 ef6969a8aa78820e8a2be94a7e5911ff664611d246a01bc88616837c02615174ce3b9d8027dd5959e6a265da0f66c82200ba0cddc8631409d171abd8a7657aae
  • SSDEEP 6144:yM5LF5EJQ3ieUIVw/mcbAM3mjLidck3hxGKP77DpamfpTy:yuJ5d3iUi/mcQPi6EhxGU7x
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2