Extracted

• • Target
    file.exe
  • Size 329KB
  • SHA256 4923541d87f0ef585682df7c3363a4591f6017da64b4986fef30b296b4885616
  • MD5 c90fe893c40bd9129562a639efab8dde
  • SHA1 6d9ab2f0b772d5e4fc024720665464df75fb4878
  • SHA512 12d847cd3e8192c63acd02bfe09cd1e7897650d481a228beeb08003d2bf725f463a0c85b11b87b12d2579c9f99a54a26d21b2e7fe70096ec95b85e450d2432df
  • SSDEEP 6144:VeLg50I/HzhekG/7kMphVkrh36FdNTOKSJIyMkpiuazxrOzT7Z6:VeE5HHzhGTkMW6F7diiuAMnd6
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2