Extracted

• • Target
    file.exe
  • Size 425KB
  • SHA256 4c8b47b5867731ca46ffbbe4dbbc759b052fb182d0bb2d70eeb1de0311786c76
  • MD5 b87474f7b925d0ad867980794306a45a
  • SHA1 9cb856591ce0532ccfdf5fc767abb9f5195182aa
  • SHA512 e7e4ba8ce82b76d31afe00dc8760334aa3851507d599d847f5d0207ecfba4f73542ae7134ca7a2ad60cd8bcd97cbfb817ca526d070c869b0a7685c5228e291ca
  • SSDEEP 12288:ugCYJEH3aMOzuaOsddNoh7McIz1+UEGdljaatUwi:uzZH37MbOs1o5UEwljaa2w
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2