Extracted

• • Target
    file.exe
  • Size 435KB
  • SHA256 61a7fcc7fc8b643e115022a1c0e011ea2c3c53e44e7c96b9260378edba5e6ea7
  • MD5 607ec2353929f2a88fed4594dca904f0
  • SHA1 cf4cbc188edb0ca4ceefa6234189fe5cf4762bc0
  • SHA512 2265cdfb9f56735bd23e2db38d50ba4989c0f73a8e234658237d86f36086c5ea27c1515bd42e9b10547e264df89616e16d998e99367ac515d731e83b01d0e51a
  • SSDEEP 6144:za9Ld+tj38ZE2WAp76hOm+otZgxRObPn11/l3WLYM99UZdLaYon5Jk4eROw1g:+9R+l2DNGkItZgLm933NMYdin5JF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2