Extracted

• • Target
    file.exe
  • Size 359KB
  • SHA256 d7fd854148197d2bcb0b950073f5fc33aaf2447fb6f638dde571d4900452f593
  • MD5 9f5d9260d616ec092a74b763fd3ac323
  • SHA1 b89869ff1c7b29db192a9970f738b811e3b961bf
  • SHA512 1fb872c3b85d76ebea7fb68066a6891b683cbc862bc32760f482ffe8850fa6a097091cfea4fcf14aba769bf096088d6d8027041049d7cc0ca45862fefd95d510
  • SSDEEP 6144:LJLl4LPuquOg7F9F3JlFRm98CijKJ+Yibc7La3FalV5jaV3:LJLOS9OgJ3Jljm9iGJ+YTW4lVg
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2