Extracted

• • Target

    tmp

  • Size

    137KB

  • MD5

    7357ebff6a98df7135b5b4be8ff5451d

  • SHA1

    7ea82d17eb6d7b1a4c5a2d5240a1ca63bc9809e1

  • SHA256

    54ab734131bcbfaded15776d689015fb747cc7919b70b2d8b1808e103bacebb4

  • SHA512

    5a23c49b243610ca82ca0308d1b01341da22a59cdaf62b682ee2333bc2e4465c875f5a78f422a2281d9684d76e116bdebcaad98f31e9717db65e4b6779a85fdd

  • SSDEEP

    3072:zYO/ZMTF//4Y7DcN8YOuNZ8AV4DFlyRzqhdSSB6y:zYMZMB//4YkCYOuNaylqhc

  Score

  10^/10

  redlinebreddiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2