Extracted

• • Target
    file.exe
  • Size 328KB
  • SHA256 3b7b033027e01736a62862939f5c77a3cf69a15002e39129fffcc5c8f294fd31
  • MD5 d30d8def23ed8ae3b89a64ae5a26077a
  • SHA1 d1efeffa889025fa8a9989f04c2a8ff5978b6eb0
  • SHA512 41138113ddaffc3356f6efb568174103597cac144a9c690a5cba49fdf47712505130c0df3797e04c3f65031c1cfc0b9f54e8789627a702b09ddc29acd54921a4
  • SSDEEP 3072:ZX6leLT4xDNB5rH5T8tUH6i0XSnn6Tdi/qQt20bLMwb+jf9JKRkUnugv1qPsBr7n:9RLsxDNhgtunSDQb4wbK9wDbKWftY1G
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2