Extracted

• • Target
    file.exe
  • Size 351KB
  • SHA256 f0aa4cd2214192b45476925164dec4f2cf3b3d9358629a2dbb64cee17946c375
  • MD5 1e9a5178c49fd5902bbb31cd7f7345be
  • SHA1 43ad1282358815943a20d41a17c288eafb4ea338
  • SHA512 4cc7f36a8cabd4f07a029b7a872858c93003a51c58ffd90acc424f0552cab28c619c4615977454d35b671d3870beaf631bdc695c16388bd350bfcd1f20ee5d8a
  • SSDEEP 6144:+WvSU7VLBqa7sJYLGurN7RQXl+EKE9WtqOFjyUnibcdtxFNGDZ:ZvSUJdqaeYCurNm+EKYWtqQdtxHGDZ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2