Extracted

• • Target
    file.exe
  • Size 433KB
  • SHA256 fdb5a80b4548d2f0a1aa4c70a7f7371d560da3f71014e6cfa5fbc7770651939c
  • MD5 6d3fba799241183ff775dcd8881a14a4
  • SHA1 943b770c8a44d8962faeb1293ebe520a7075aefb
  • SHA512 d2d4b32892f79331cad3970af66742dc26fb662d1c4d7564cfc9ac0cb9353c40277653a773476bd67fef10f93b8cd1ea11ea48d14e4ae44c5f2193263a07d2c4
  • SSDEEP 12288:RytTdB0jnrodv5GOiCDv0L4XpxnzpQ6ijqF:R6dBsodv5GwL+4vzK6Z
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2