Extracted

• • Target
    file.exe
  • Size 333KB
  • SHA256 f06c94090fd5acb21d95d1f576e40991aa6abc8d1ea2f085ab0c08cfde5050eb
  • MD5 80228a4070074c86e593067de1279951
  • SHA1 52a8073dbb179a5842896c60ea179c0a8db7bbeb
  • SHA512 9451f3332b4fcdfa174a5ea80b4936047fb459a1f9c9ce9804ccc8b64ea4e92b369c5b24555906da81c2a23bdb02d3848163f796ffcd907bd7a173c23b621711
  • SSDEEP 6144:OwgLY2yCuyUj34iOpH7C6DpnAXOHS2VnFU4rF:Owgs2yCuPz4iCbZxVFU4F
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2