Extracted

• • Target
    file.exe
  • Size 351KB
  • SHA256 719f2e3644a96b939360c185d2ebebbc895d539fcb94eba1af05d23ba3ff3c75
  • MD5 012c12e0d1a7f1204c497af4e29c2a6e
  • SHA1 e5a962cf72848f7d62fe399d7ceefdb277441009
  • SHA512 737afaf73b528d487b9e778553ba464733891151f2731e803c767d6c1c427e8e393a89ea41161a4b8b6cd0e574a702ea2cd62208a28e69a9a0d2aaac6f3eea19
  • SSDEEP 6144:dyimML1zM1voxhngnL3k6xYcPWMAVIy2ZsClbJnP6o:dyipRzM1voxhgnTlx9uMA6VJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2