Extracted

• • Target

    eb527f200a19d5cdc555c038f459f7d9f331218ff530eacb19e17d627059d291

  • Size

    384KB

  • MD5

    474a91b86a22a3c07aa6a6efb7de3b1c

  • SHA1

    94172305a27f8a025198165d43826659fe1ee381

  • SHA256

    eb527f200a19d5cdc555c038f459f7d9f331218ff530eacb19e17d627059d291

  • SHA512

    005d12716fb0a0792f61b4df759efaacbfe2c6d79bc6d555cdbfee8a71c097e5ca9e720a2cdcd283208ec4b73ff8c8778c09a072effefbe36accde738a3fba00

  • SSDEEP

    6144:ILtF2GuFqnkYuH0mAleeCVbE+8ARwrxOPbAk5yVV65cGtK8hN8LbbIr:IRF2GVn/uHQ44cRCxOP7iecRLb8r

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1