Extracted

• • Target

    712fcdfbc96769b41ed885bfa66f8a9733ee12b4c2354e2cd8ec75541c8dd211

  • Size

    408KB

  • MD5

    a429d4a14b86d68e0052a081ba404deb

  • SHA1

    3c555149e898d0c52a741dc5f73cf8681f672a9c

  • SHA256

    712fcdfbc96769b41ed885bfa66f8a9733ee12b4c2354e2cd8ec75541c8dd211

  • SHA512

    1e7565116e445407d015228f4a2c98c54dc946c9b9f06cdeb2cae275bff46278e5a39d9f9558c698150ac3e79538bf118435f22b283cb9ea01dc84a877baa81c

  • SSDEEP

    6144:7LCacpOI7RIvovTrVlGHhmcVev8L+xyIxZ1WqqdSv9x:7ezYI7RIvo7rVlWMC0xdYU

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1