Extracted

• • Target
    file.exe
  • Size 328KB
  • SHA256 edbfb8ea9975e2d0288570f4d7b575ed9b30735d66409c221232e908bad40b98
  • MD5 776c40e53a7394547983a497adc68b7a
  • SHA1 2e26a1a87965b83c41329abb054ca869494ace0f
  • SHA512 254d456b3726afa326f0dde7e16d15c15f155f5ecf30b5492855b98b9b25fefd494ebb9e1f8b70eb34ba12892a504c3fbbd14ea618cbd5d4521e1fa4201f9cdf
  • SSDEEP 6144:VATLep1e/ZGwwaHdpw7aTVv7c7D4lVyKG4GXwjZVLl:+Tip4/ZGXqdpw7aTVv7c7D4ZGTaDl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2