Extracted

• • Target
    file.exe
  • Size 328KB
  • SHA256 5e50c738fe664b411ea8f54ccfef68f20889033554673735e7aed0ec37dbbecc
  • MD5 b204d8ae4eb098701df543bb580a2aa2
  • SHA1 40634f5f199238f4e82174f249e41d9d0346bf08
  • SHA512 d5856ae3acf082ff6c02f7a28ace9940065cba3367b4713e01b2eee401edac06ca671df9c5d9001b70ce128164d03e4c704ae4d93d20cf7d981e7bdddf31ccbd
  • SSDEEP 6144:kqPCLnzunsngKcNn7yBjio7Y5fIbzyW7jMliQl:PPC7zwsngZOBjio7fyvliQl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2