Extracted

• • Target

    file.exe

  • Size

    333KB

  • MD5

    a3eacc39b92bc26aacd3722a8b3bb979

  • SHA1

    d59fb817d04c6979962e4a04a423a12deb6db6a6

  • SHA256

    53d3c5c5053e6d15488441a76a22a66f094c34e4024d10b8f39160291937fe8b

  • SHA512

    4279be6e74511c0814962ebdc37a0d30c27b6a65472120eda8040275721485c24c9d49a8ef2ddf4e08488c24051c1679293c9a94d5c7ca8b0017fcad82eca6be

  • SSDEEP

    6144:WtL09ictVE0X+JnnZxbSjsZ8Gqoupkd0Tvd5V1GiGgz0rF40M2b:WtIkYVEdRajW5C2Gv3f

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2