Extracted

• • Target
    file.exe
  • Size 427KB
  • SHA256 f2cf59262613409e9208a777cfadfa11bb5e6c2e80e71ce0e7b3e97a968af720
  • MD5 94ccf7d37d8debf2a2e2194a586c439f
  • SHA1 5fa1288e11aca9bbf3da7fb442d35db97bbf93f0
  • SHA512 ebe66e90888c071628af0ab41c78dd09d0be225128f1e56ba0ba63fd8f94fed8b085427533f2fb2f748ae7140910b6aad2277a47ad3aca7ee3e18954bbebf2a5
  • SSDEEP 6144:/YGSLXuDvggSWex9yDPfOOxKQx/2JjHAWPbR9xF0Sbjfxur/tb:sruDv7Sl92fORg/iXp0SbjJurR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2