Extracted

• • Target
    file.exe
  • Size 409KB
  • SHA256 bf9af0d6ba9b3352be2095f141d0dd85c79bfc9ac6fbeb5929f29cc40ea3f9f0
  • MD5 97af7d2059a5ab192856719d31cbabc8
  • SHA1 56bc3a22acf147373a52ff46b944b623611637d8
  • SHA512 39d63f644723b972bf25fef3568f84a226173a31492778c58b06f496b94701d3a583016e92284415a7e6fe862826e52d00a4d6e15a2ec83911796af97175770a
  • SSDEEP 6144:ypLxX/AY5sOEY4JKdPDKHVCILBw+ZHBTNE6URu5lpU870/VG87aAo8btow:sh/AY5sdWGHVCIL9ZhjURGCVL7aLqJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2