Extracted

• • Target

    39358afe5b0a7325927137121c54a04de0bf25d9870f38ec3090f7854641346e

  • Size

    413KB

  • MD5

    18376c87915c6d7845d7135820735e8f

  • SHA1

    db6bc971f9f4f3bff0f2a62d2c61c7ff4fd50433

  • SHA256

    39358afe5b0a7325927137121c54a04de0bf25d9870f38ec3090f7854641346e

  • SHA512

    bba2ee09f0124bffd453b1368bb74b58778f166a23fdcab695c841b9f8cdb17d46a35976abe1417bb00f2a11c749712a9a4076ac809f07afba14dc9e0042f91b

  • SSDEEP

    6144:JLOBrsLjsZ7s2AMt0KrExnIjiibkCQNB+TL4wUMC40yIxZ1WqqdS49:JCaPsZbnthKnHNwTLGMUdYj

  Score

  10^/10

  redlinesportdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1