Extracted

• • Target
    file.exe
  • Size 359KB
  • SHA256 88627b437f2f657d7641a4d95d41a12482e5ceadc345d98aeedfae337ca306db
  • MD5 05f876ad55504787376fda3174ef980b
  • SHA1 79fdb019add28a39340f37b2c681119994d0e688
  • SHA512 39f53af5a71695b211e0e84c64af9733e9e72ef50ac3637a7b4ef08b3b3006f5c8f03555c25edeb86776424d4ac5fe4d5ec17b78ce53c284dc92fc25b8fc4370
  • SSDEEP 6144:4IFlmhLmtdxf7a5zQ63CeiIE6u6LD1OsscVzcKJPhUJhoM7Yunw68u1x:4IFlWy3B7a5Q63yWu6LDQsjNlJSvoXu2
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2