Extracted

• • Target
    SecuriteInfo.com.Win32.BotX-gen.11339.4536.exe
  • Size 350KB
  • SHA256 2c57cc2b80aebe7b02349c1e229d4628ccf7a6f50d50c7ffb2ab8fa882f62b90
  • MD5 8c0e465ff29c13f288a20959e128a666
  • SHA1 85bea205303ec05fb79413cf42b11d87d757e539
  • SHA512 64192be4d3e35b1ce72cbf7f4c21e69f323792e2db490506c895159f201e204ffd0a576398822082854f5fb78f7bf2729903ab840e71fa0d050ad98a6c741156
  • SSDEEP 6144:srHLyKJoQM34n70D3oLqrUGhBSnEodiTS2eE0hWhHZAO+Vl7l:szeKJoQK4n7q3r5hBPwimf4hQX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2