Extracted

• • Target
    file.exe
  • Size 328KB
  • SHA256 da2bfa8eb80ee635d379889bfa257d1f3f5f8a00c0a6e34c7ff2bacc69ae5e1d
  • MD5 10a68a24c2a9c23ea723a2d842ac88ae
  • SHA1 80c73222d1215b7acd9bfa41ab195ac88ca3b861
  • SHA512 e26b61ee5fc2604c1e213f5f8517d45e6af9e2e1e12433c8d62692f93ee195603fbb60d2270fbcd443f8eaa23a3d60643403c136640c4cbffd076533806f0126
  • SSDEEP 6144:/ZCLofpufe3Nlea0il0/bSfiCQ5O7oIKHhJrbeptj8n8v:RC8po8lIqkmfiNO7o5zoSnY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2