Extracted

• • Target
    file.exe
  • Size 440KB
  • SHA256 8e011d62273f132f8b643619be84d6a3e868b9ddacb15db75d855a4f3ed03eee
  • MD5 cb1b17aabe2d679b05e9e297d2215186
  • SHA1 e001ec1b7f413911eaac7e7a598a248f130c9f9f
  • SHA512 c07edc4cc80843b188dfceafbfc338d3e8dc692287eace02414565a123e5a67e035b42fe9012ad6fd6a0bfe6cfe4d3ba25cca053685a07628c0f587eb87957ea
  • SSDEEP 6144:PLSPTH2VUyZDrAMTT74hTg+LblDXyBqm6B88c9AIq1yIxZ1WqqdSv9x:P+PTH22kH746GIq/BNcg1dYU
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2