Extracted

• • Target
    file.exe
  • Size 483KB
  • SHA256 49e6332a5d2c1bf27e7d6c2343c35b9d98c39d6c8bb203b9e2fff4234496becb
  • MD5 e2acb3bd66fe2de6bf8f2a59873827fc
  • SHA1 c701ffab05527558e25ba5efbb8e24c7f27e0f54
  • SHA512 feb806036a04dbb8312b8fd0a4877590fbf13d3e755d806324cc6086c21dfbe3acfef712766a463e021c18f684bf4d3b19312548b032944a77f7c276bbea52d3
  • SSDEEP 12288:xBaApcTAjFW4GdW9TBGiXtKw2gflFnDs:xbpzU4fToiXowHn
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2