Extracted

• • Target

    file.exe

  • Size

    333KB

  • MD5

    ed0f0e47c50fba1822693572abce7218

  • SHA1

    269d5ef449b0cfbfde440e771fa03d955fca9ce3

  • SHA256

    c3f645b7080285e3ecc3af56997291f5fb0a71226228ed6383d93d1d2c88b998

  • SHA512

    08b437012735ad0fe50d2c8d6fc3721ea30a86b8ac4a9c425d8ef27da73ed662a589442804c30173b232ee0f67a6996292d24c984bda149f3e1d9302d5632ceb

  • SSDEEP

    6144:hjLXcXWdBmCICDxXUEor7AzDMQ9I9VYE+jkyfVo/WeaLgzLRQ40M2b:hjbyEICDxXRor0zDdGF+gyNo/WeaE

  Score

  10^/10

  redlinejokerdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2