Extracted

• • Target
    file.exe
  • Size 378KB
  • SHA256 594f526c9a75d708f15ffca9ca80aac037e02b5e38386e34274ea1bbfc97c95c
  • MD5 cc3e891eacc1e0d1ae8641563749c123
  • SHA1 84f4786e6a1348ba3f4ec5d7cd0eb37b67d0efe7
  • SHA512 d6f89c178ec3cba7b2e038fc327aa236c147c1b88eb90b85ef6bafe5b070f2b15d99c288aefdd1c458d7d9dc753f10ffc796641f1e2502d422b522fa5054793a
  • SSDEEP 6144:kLKPUcVOL8/lg15nB0uga5e4HTzxTSOWnlqqb8o7hqgHk5o:kmPJVOYeOuv59HTzzWq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2