Extracted

• • Target
    file.exe
  • Size 329KB
  • SHA256 ecd028fd97dbe70e1f2a212b4b224fa987f14828e25098ee342ab3a7a0b2afd2
  • MD5 37e242dcb26b55c3ac1ee36be29203ce
  • SHA1 0ad90e1de61bcf38a8db773fcb89d2b3b0af53bc
  • SHA512 95b3bc7ce1926b6f692bf0f83e0d1e217df76d281b2ff3fa59b31e0e540e935e54bfc143e6a61a63b90ae29174305abd9d55de58098fdafce60c2c34224dd02b
  • SSDEEP 6144:j6L0nSpiLCl/P8yL6dPAmH2mtX3G0RBuTKjP:j6An0iSNCz2sX20R4O
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2