Extracted

• • Target

    file.exe

  • Size

    334KB

  • MD5

    165c8899fe37a26326893852073b95ec

  • SHA1

    0275e82474520c00fbc2902ddc2eeba89a72e641

  • SHA256

    3a5c194e21ce7ebe7324f788670445369a7b16a72ede83e3309c14465da9fd0f

  • SHA512

    566d9709d68627c6f7e0aa34b7df7873fdf3cdc7c953b59f0b009200231570ae84fb57d18ea640a81c24d302f6a916bd0623e2bb2b9fc0bcbb751b2449431b15

  • SSDEEP

    6144:HVFvLKybqpA0OZkC/A6QUhsK8+pXFTc9c0Fg3CzrUOCU0VC:HVVmsxZkx6tQ+0qSzrUsO

  Score

  10^/10

  redlinejokerdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2