Extracted

• • Target
    file.exe
  • Size 376KB
  • SHA256 d95060d1ab4dff434f55b8d5a660c87783d16e16a47bb5fe30c075f7e7234da1
  • MD5 c0fd9c661fbfccb0ea77a538ea6cc049
  • SHA1 b7358df1eb0f1c4292dfca207e0617a5a8d12da9
  • SHA512 cd38eb27fae98e8520262921fdcc23b4273f4acb637756d96999cdee0394082928e80340140e59f84d8f121c03816410b66d3d5f358122053a314732ee4c1c29
  • SSDEEP 6144:iFLMx0+YGrSLdbuzsOEVhmfKJqszVI3+wsaMkQ08:Ioud6SJqsOG9tz6+g7Q08
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2