Extracted

• • Target
    file.exe
  • Size 347KB
  • SHA256 e1a18f0c3c17e89784482e9574c44c3e5878e659a6e0abc71fb24bcc1078f89f
  • MD5 d2744bfca25b9dc2626acbe6577e8de4
  • SHA1 e94066711058e0dcef652e4b6a73ada18e2cc842
  • SHA512 0e409d2d202bf08cb1767f0ae0832a8be5cfcc319a6d3df6a23ca76693913e3db591d7b69a3b3c49a93e6054024c573f99397b4b31e1aa16aa82df7cda5e6a62
  • SSDEEP 6144:08kzLHWhpebIevDmJ5CNu7CUN7qv+2ilTCUNpLxTCZpD/I6tiQ8qMrc:08kzbWflqDmz9N7qWjKDg678n
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2