Extracted

• • Target
    file.exe
  • Size 434KB
  • SHA256 bcba2ad2941354623a0df7ec328d25262bb513de55acb31480e7bf964e25cbd4
  • MD5 87e8f47a3d3ce0ac20889cd274a2a790
  • SHA1 81af5509a1b939d19dbee5f31c5f0cc74c385ec2
  • SHA512 749c5d25188ee658bfc53029334cf74acd337d64071234782595ee95e7f882635fcd14355222b30cfeb4a211c172313686e81786c01e5c02a1cd08b5d02a04b7
  • SSDEEP 12288:r30lK7ZU4QHJ+jaCO/HJQrpfiljBaVc0din5JFR:28U4lOZGfCjYZd2
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2