Extracted

• • Target

    file.exe

  • Size

    434KB

  • MD5

    3de2163e4ce1c9afa7b0009dc7380ec7

  • SHA1

    85c920f1b84c1bc2e86dfbd06da57df01f389a32

  • SHA256

    b56505313b06f401c2a11862946a050f9e299bd7ca859abf43fc606b21f93f9f

  • SHA512

    d2944b9e6263430393fcc561c78948d38ca8443a8ebea13ebdb85b1ffed3ff2895f3aad76791601ef3527138268b4712ef586291165534bd9909da73f868ab62

  • SSDEEP

    6144:e/UWcL9+Rf6dQqsp3kRNI0G++XRrUjjzwpa441aiq+HDw7n1HbwZoV0J:D7Z+RCyqs3kRN3GPXRrqIpadnVw7

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2