Extracted

• • Target
    file.exe
  • Size 412KB
  • SHA256 b0937d8d57fd2e0a9cb67fe661a9b6d2c0dc2f2d2b92391327e50b6d327ff74d
  • MD5 9f7669fdf494e2475f63eef5b3415c2a
  • SHA1 ec66518c55b53d32e41e6dba7552ebcfb17bf998
  • SHA512 4ec75e70ceb6cc91d5b9c090e185cb53dfcfc5c4acbe05574f0129bb7facab921c74c997cf623285af83e7c62280ae53f13f54679891e32d136e6a6a6bec75f7
  • SSDEEP 6144:TZer9Lx8YLaaxgXzHWAGIe7Ju/wnbq2rUG+ksSvRmnjEDG23BOHT:1U9t8caaK6AGIKJmwnbq0Bcnjd2k
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2