Extracted

• • Target
    file.exe
  • Size 374KB
  • SHA256 4ab13258167f4b6367b397e40405c0fee03cb634b38e6af80d7fc3f60a1e8ada
  • MD5 bc96776a325f5b76292e79be809f0725
  • SHA1 d80cc049d2af836ce5f034682df58bec6637688c
  • SHA512 478c00f1b0cdab38bfc9ad60aa936dfea4e5b8b8045c49b0b675fb46465802d849e1c69adcaf98b8df2505512b2696be427d68885066d654a8f73e9ce4596487
  • SSDEEP 6144:VLlfWUVPqP+7lsonGVBDwiELWjgi6xtVEP0BvMUeJ/ONBGymI:VJf5SolsoGQiELWULjotVUPm
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2