Extracted

• • Target
    file.exe
  • Size 359KB
  • SHA256 b03a3978a5e4c0e49c03c2d4262083d3a5275a96c82b59f0850dcc85605ac960
  • MD5 8500bb28f14c93c43db8087c401175f9
  • SHA1 e15e4e1f3fdc55ad991642bee8070c3651427191
  • SHA512 ca1a301a131734ae07dab9f02fc0bfc79410487b5471eec20b450953540a05ecdc49337a7176709296a46cdcaa1c7e2d7cc702b0c63a1b37634b2af36661dadc
  • SSDEEP 6144:tt6XDuLr/NZ0apCAQ2he1zQ6BJjrl8MPFascrqQpXss/z4oc:tt6XiPr0ap7hUQ6BNrp9ZsO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinenewediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2