Extracted

• • Target

    f205c24c3562a19b0179fdd31c287f9bf9a90f50e013ca31784dac0be1b02878

  • Size

    351KB

  • MD5

    c7e72385f34cf90352b10906aafe62b9

  • SHA1

    119f1ada9a31b1471cab0e91ea1e76a2b99c9872

  • SHA256

    f205c24c3562a19b0179fdd31c287f9bf9a90f50e013ca31784dac0be1b02878

  • SHA512

    dc0fb72d64fb56a8da83a8935e33b9686b5d282e40ad36f17106bec56dfd476795558ca5842f6710c8e4b6210dca5cc364cb7b0510cd39d7f0da3619e149b791

  • SSDEEP

    6144:pLUxTfLdH/8wpa6wHfrIP5C27kU+tK8wHbIr:pAxTjdH/8wpZwfrIP5CLUH8r

  Score

  10^/10

  redlineshakurdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1