Extracted

• • Target
    file.exe
  • Size 444KB
  • SHA256 ed0b3ce110fcd901289dc5ee0e10c0395252843069c1933804b32d85db2d8197
  • MD5 070e57f89c743b7a8268b4a785dd3cb2
  • SHA1 01b36f6605cd7aa52481057a04544a8cb169751a
  • SHA512 9bc2fe55d2045185b03267b2099c20a5902c2adb17fd98a12b1f5e6a3f779db91c0baa14f1a5de9e5cdf7ebbc5e9bb20edff3c437ceec76ca80377e8dbf85d5c
  • SSDEEP 6144:ycLh1mvDk18Y/+yNzlGWcL5mh9SDl6hCuNbsmUxJvJiKmlqryIxZ1WqqdS09R:JdQvy/+yjGWM5mKDl6lNoZvJvM8dYX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2