Extracted

• • Target
    file.exe
  • Size 375KB
  • SHA256 671a2aef426199523c5c10862b2b9a4368d476ec6306fd7a33a5ff3e51254d8d
  • MD5 b31e09e5972628629c70920a72c538ca
  • SHA1 f98438ac9a66ac1adf6970b449bba7501d59dae6
  • SHA512 89708493a1f6742af42597b6849a59a3c7448ed4834e59e999889039d9788a1e5f47df61f3652ff06a4f442a9d92202df3cd95bebe1c2516cf1f8b193c63d0c6
  • SSDEEP 6144:3R1LvsOclKiuWXBJWWQU/ggWN3z4nmhyFziTWETJraMC36X:3R17sVKiuWiWQ9hQm4EK9Z36X
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2