Extracted

• • Target
    file.exe
  • Size 409KB
  • SHA256 95418a573704a7dabc5c8e5c1378edc75e55f2a101282b0e091447c6cdcfdfa0
  • MD5 a960244c895068d34ebe936a7367c9ec
  • SHA1 8d41a4307a73d593842f6b7a5dc37c897abbcd5e
  • SHA512 b296834633a6b675571489cd83083d6f5740860f8f831183c5fe63dd2acf967833bebd7c4163fe3a05585a7d3f11cb2fb2a18a7c1e7bb6a97658ba72ab4b84d5
  • SSDEEP 6144:ApLxX/A9jtNGjTCKgOvqMSRFSZo+AVFuH4G4+xK/gY/VmFv8btow:+h/A9jqHCfOvqVR4Z5AoSJVsqJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2