Extracted

• • Target
    file.exe
  • Size 482KB
  • SHA256 fb8188ffb0cf446d8a43dafc15adc94f590f3bbef120b92e950d0acc230de7bd
  • MD5 eabb111c74b1858f68abda80f3991adc
  • SHA1 8d8e7342d651e20eaeb6dbfd2ae8dee55e5263b9
  • SHA512 2c3d5a5fe79fc431140950de722fa1987d5107ac7d407e775f4814263afc1bcf78b3752691ec97ef762343911017673040ad2717bcdf8fd2761e44040f52450a
  • SSDEEP 12288:b3Ih8Ck4RbY7awmeQdz8g0IK9W9Dg6aw:bJC7caw1m0x9Ek69
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2