Extracted

• • Target
    file.exe
  • Size 383KB
  • SHA256 ae009d97763d64b3ccc2dfe89bf6c443fb530025ec54f2f0035e16c119aa02dd
  • MD5 d503fec76f98bd13501aaa71ce3bb3ee
  • SHA1 a0763b6408d8907b1e711da091065e2914b5e29f
  • SHA512 d58d1fdab9aa807c527fd977c33825bcec9ac47ba83d53d5d474ac25aa1d9a50404757a9cbf37986cf3fb52a7107f58a7000036fc913389b4c27a40cdeab8692
  • SSDEEP 6144:uLS/OdqYWexhBRn8XFdZcmUBS6kGZ5Jg8JfPiF+w8DVUf+uO1YDZ:umRYWeLnl6H8JH48JUfz
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2