Extracted

• • Target
    file.exe
  • Size 427KB
  • SHA256 35799208aef820556e9cf7f652d4ae8e0802bf48a28e725107b7ce59a8fcaf9e
  • MD5 16e87216b28fdc510f7967fb6b8ee393
  • SHA1 5b4c54f3da3f137162c9bdd4c7ffd07cce310221
  • SHA512 43df85d5789f50b1bdf4945b691c8874abba457c3df018fb8cdf845dbdcf84265f791061bc51d69a7814ec33d688351caa7ebdc7ff3728672f02ae0f49c2ce67
  • SSDEEP 6144:fYe+LNm0aVebPMm5awsXlb97ZwM9vU9onkI0isvzpQ6ijLxQFiaI:UJmPikmJQr9s9lIxqzpQ6ijqF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2