Extracted

• • Target
    file.exe
  • Size 402KB
  • SHA256 9cfd4fc2b533f3911f6ec8b394ce0b65aae140f262299d2bb91e7e23c1b459bb
  • MD5 49227c55825052044da5757a6f0c0df1
  • SHA1 cfb9476e1903fccabf4bd4f8dc457ea4baa040f3
  • SHA512 620d27f43ec396830420ff1f0735966ca751b4257c91522780e2bab60d42f85d6ac4a10653ce5b04fdfd0f3a2b7af9f96caffa09bc0894fb8c15383c307ef259
  • SSDEEP 6144:JolLXZl7NM9q5kE5/vdE2//XpvYI9a9Vyu9UZdLaYon5Jk4eROXNj:yL+c5ks/vR/xv6c5din5JFR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2