Extracted

• • Target
    file.exe
  • Size 334KB
  • SHA256 429379b0de1b940cbeeead3d39c4775e70a2fd8d87beeb00522b59889a778c3e
  • MD5 14188eab106d472bc23e04007841de9e
  • SHA1 056df3f057af6a53074397dfb3bbdf3b6460dc6d
  • SHA512 4e34e75df47dbe0e099739d131ad78238e2e7d85d90f553df8924852a1b16b449ef97618ff8dcd0cb051c8dd1f3c651ca46ca87f58c31e3817d621e69897b1fa
  • SSDEEP 6144:4MtKLR+a2+/nlqxjWuZg63xFZCzjZ5mRYwuQg+:BtKt+x+YEyLZCb+uQ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2