Extracted

• • Target

    e65e1432b5b1d09d9314276b3cabd515fe2cba2516251f5379bc10b77cdaee30

  • Size

    334KB

  • MD5

    7cac24c7ec05952c47fe380bfa55f7f5

  • SHA1

    22187aab75d669a00470024939666b6ae9ea8c51

  • SHA256

    e65e1432b5b1d09d9314276b3cabd515fe2cba2516251f5379bc10b77cdaee30

  • SHA512

    cde1653c12046b75722771c284cbd365a75fcae88695643caf9dc7f006e6a3aa80ebea39d022de44b543bfd94539334bc87b56d34dab3382aeb432dd8c6de77d

  • SSDEEP

    6144:gvKL2RfudvMNUEb+ctR8sHOYB0nnz5QgyPdQs0cxs+KRsUgNDjlVklPH:aKSwShksuDnzm1esxCDRgNPlU

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2