Extracted

• • Target
    SecuriteInfo.com.Win32.BotX-gen.4881.16128.exe
  • Size 350KB
  • SHA256 baa5c6d54c809d20b8a2b5c2645f7c6d99c627e1a8e2bb844f071fbcb3cee6e3
  • MD5 56efc71d5addda8d30bdc24ee87ef9c8
  • SHA1 8bf9c65136bea1e4796b93f1f710486330ca8cc6
  • SHA512 eb25c836ffbf557a37f886dde90b9f4cb0d80597efc02698445948c881126638b48fec0b9a73db7fbaf8a10ede85321714d25864ecff84ec0140d5360db74e08
  • SSDEEP 6144:+BLqd3zGWkNZMKfd0S1x7dBQlDJ/0VtHISH6TDi+Vl7l:AGdiWkbd0S1p+dK2SavjX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2