Extracted

• • Target
    file.exe
  • Size 375KB
  • SHA256 aecbffff87dde6250bbe37040f5aba94d7df62f94ef10f940ab022cf5dae38f4
  • MD5 295bf2db9ae3c0fae4cf1f4b8c80cb04
  • SHA1 69a7dac09aaf3803252bff2eb22bebc279b93f3c
  • SHA512 2616508da38f41a0a90a2efdacc469cc832c947eef2da76e36c863492b609ac43db6480094aa72190d293b9eca817dde5420d2119e7451e9ccae7af7d753c181
  • SSDEEP 6144:TLL5Vh/M194HohPl39ap6fVXcgIGDlkksgra6wExWsuvi3tm:TLDFM194Hf65pxDlkkr8KWsuvi3tm
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops file in System32 directory

  behavioral1behavioral2