Extracted

• • Target
    file.exe
  • Size 409KB
  • SHA256 94bb626d2ab62ba3fdd18faa2e3495231e55423583c10b5fc9fac4e6635a23e3
  • MD5 030866836a62744c9a3f99cc5cf51436
  • SHA1 7d09bd2d6b57ee0ed35ac95ce3e1213d34689025
  • SHA512 f76866db41091f5b9a604fb8fb88b36f1a139c3594b3855ab35fe276ac6f9da06ba6fe4db963e5491b8b6bf55b0bbb989c37db5bd557d4b941b69c4747e90c40
  • SSDEEP 6144:wpLxX/AnjUn/MOKQzr9M1fiZUqWMT693iY/V06ZM+8btow:uh/AjUnxBzri1GUZMTIVW+qJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2