Extracted

• • Target
    file.exe
  • Size 334KB
  • SHA256 de32b2bcdbe7eb7e9147e121749d07fb1e3f4f13aad48bfe73123a021ff3d4e2
  • MD5 33cf5659a493944fdb72f3d100376d55
  • SHA1 f6d6621230c93be97c5762cb84a000c1035b1f7a
  • SHA512 45873962947591b99b51ffeff28290344ec2c3f34604602faf27f5d629de3407a40b92ada8cdf4bd2f05e7f5690cdca22a76e7e54c4b4f20a81974fa5f016779
  • SSDEEP 6144:HIjjLxM7z9kKJTdhdU0c863enEgkq5R51JZaXX70w2g9vpKog3Cx2+U0VB:HIntMfCKJTdhy0O3qzkqpZanfRSS8O
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2