Extracted

• • Target

    07220efd22672ef2e12ca128a2b05fb624e8552a21090e97de7efc95541be327

  • Size

    373KB

  • MD5

    a9d63a425135a5c316cf4f219ecf05ad

  • SHA1

    141debc2caa634930244221c7c0322317bd4eb86

  • SHA256

    07220efd22672ef2e12ca128a2b05fb624e8552a21090e97de7efc95541be327

  • SHA512

    9e4da708ed150d60ee8af46c9cd285f86b8d010a5d51adc1feac6442bfe5ab486d03ac55d31862301fd95a925190240ef74426df388904b86761cbaa45024f87

  • SSDEEP

    6144:lLeYRuUrMVz2uAAXUCSnw4DuVYWy5PyKtswZkw78J/7jRGymI:lyUO2bOlSMYW86KrYV7jfm

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2