Extracted

• • Target
    file.exe
  • Size 354KB
  • SHA256 5c944d1e519ec06eaa4c4530bef81a3c1fe5d560ebb3ca41f90931ba04c46f5b
  • MD5 efda3be35bf42107835f4f1e533dfd80
  • SHA1 a82b81902a08823589cbc21a1608f9c956b95e87
  • SHA512 02591b35b6a29d2e917bb72cf5ce1a317551844a52c5c654860ce3d42ce11f33d70df05c691ba06db089d21a31af1a2321215e1ee2432f68ad704166cfcb5bf0
  • SSDEEP 6144:EK7j97L0UaDDHVLJAtZYYq/tT1uRH+d6V+wtmBRIn2uG6o:EK7jBYU8TmYj/tARa6LwB7u
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2