Extracted

• • Target
    file.exe
  • Size 428KB
  • SHA256 84a09fc3eb6a86af69fa554629489d4c660e460895af27fc895dd83dbf4171aa
  • MD5 a15d453ee7681e49a9dd7f47b209ae3a
  • SHA1 a68ba7b049b886b8ae030bfe3a56bc682ebd611e
  • SHA512 1495f95a49e1abf9fb341b118de19326159c6f79a5bde3f75d2131df4f4a43af34556b2bfe798f54c029d16ad03f51004975dd1351ee5d0a25f377e7fedda096
  • SSDEEP 12288:iCebSV5EX2mMvYeDumK2kTTNxqzpQ6ijqF:6+kXnouLjkK6Z
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2