Extracted

• • Target
    file.exe
  • Size 386KB
  • SHA256 ee2b8e861b9b55428d9e877f09be20ec266a089df2fcd3db55514095e061373c
  • MD5 a34e775a2b39f7f0330658169d704d9b
  • SHA1 905048cf139ba64b3cb19d52b29e64d434d980da
  • SHA512 6498dda3321a9ba9fb61b764ba0aa59ca4618c5aed74fc808e084cd9a1d8c337d5475e4e21630ec8c2ad4c6accedaf830cf7ecf27ef8835e34f99db482ed4c68
  • SSDEEP 6144:D9OL2ro//I1yCHdkWRlqX35IcixC5bTOyo5olZx3E5:5O6U//I1yadk4qX35IvAL
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2