Extracted

• • Target

    114bc4570edf3732d88f11383a7fbe4eb8a92417193f9d098ba095a86b5a60aa

  • Size

    351KB

  • MD5

    4a936db19902fa8c65495b7a4a608f19

  • SHA1

    a097e030457e75bf48458c523c2da5c7c83f1895

  • SHA256

    114bc4570edf3732d88f11383a7fbe4eb8a92417193f9d098ba095a86b5a60aa

  • SHA512

    851f0ec7fb0e03772ce57aaba29e7b567a5a9282c4e277bdc0b2c9994b40f096ce26e14bb66ab9d406ab69960bde97e68cdb04a9b621892b142699250224a0eb

  • SSDEEP

    6144:9EL9B9t2gG4fcHgeEYUJHXEAE0dWxwJ/PQUWGymI:aX9lGKpYUd4FwVOm

  Score

  10^/10

  redlineshakurdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2