Extracted

• • Target
    file.exe
  • Size 329KB
  • SHA256 1462282c2bb1d8bfdf7282f35c5b3442e03c8149a18d39447d243d38fd04e222
  • MD5 e211d9df3e18983c34884b4f8fefa5fb
  • SHA1 8b6b67960abc17f6bf191c17aa2bd12003b965f3
  • SHA512 b36c8440bc43409c01b2ed6de568f3855f0029fd027984a4f0d2a75b3b8417c78c28b4e88288e60b32818273c3040cd8464bf839d521851711cd1e24d02635bc
  • SSDEEP 6144:jd0LvU0tEKMIrkJKH30NCygiOCE1FSoyG0YKbfmnTNng:jubUKEqkZwyjyF7yG0v+ndg
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2