Extracted

• • Target
    file.exe
  • Size 428KB
  • SHA256 72e706eff2cd192b0483463b7c198aeb917dc8baba4e7ac015ff1c575e974895
  • MD5 f083abd1af99f7f9b523d859947e8ac8
  • SHA1 5e7ba781bc40dc98f91ac262be48c8435ccfec68
  • SHA512 33750e47bb40d311b65a4981488fb33513bba2b14d80f1f3e05cede6d0d9ec2e0058ac7a6a0066a10d2e0b53cc2a600e39dcf6f4aea7bc06ba31344a4c8c2135
  • SSDEEP 12288:AnMechSqvWZXAJrwpL3sOcHdHAyOVljaatUQK:AnuS4eL3szAyOVljaa2
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2