Extracted

• • Target
    file.exe
  • Size 335KB
  • SHA256 7eac99fcced27b1c16f2bdc4d725bdd481e84f4318dba44719d10d8b7e6bbea7
  • MD5 163931b13683645fa6d75c94fc72922d
  • SHA1 a4a59343dc899ffb50daed3cdfd1764ce7e18b9d
  • SHA512 819a4c013c00dd949ee250579686b854393d35b4970483bab9ee0ce2d758d735d398aca8e52fd32ac40ae13d7d659be52c18f49c9b0ffc776813f13d18e2ab26
  • SSDEEP 6144:pdD0QLxFaG9yxQRv1np6xRLj2i2o/YuMHxCdNemWe9j9g3CHVc1U0VC:pdDxvaGV/pyRLj9bMaNezkeS1DO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2