Extracted

• • Target
    file.exe
  • Size 328KB
  • SHA256 30a3ef678c22c5787a3eaa2b5a8e876a3cb2e9c7a2475fa03934db0bc84cde89
  • MD5 c2a773a751dc4671eb0189c0d7e7a285
  • SHA1 e1de850400295c03ac59d4f320955281a89774e5
  • SHA512 b9ee2b2328c59a45f7d7ee64e88e1277ed46df9e0adfb70e4550c991eac900a740187dc3e2219966add65b251d5288216605a62b3c55ee122d938c6b37300a3c
  • SSDEEP 6144:/41Lhj2GYwDddMj7UArMjr2pLSuSdZ/grsU4Ceg4D:Q1Nj2VwDddMHUArg2MuM5YtReVD
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2