Extracted

• • Target

    58cbf7ac3797d7ef1eba20e47e5ec7d35751122304e4f35b7f43e7e3f1787aa9

  • Size

    353KB

  • MD5

    5d302dc5573f121ac70afea0dadae736

  • SHA1

    81975cbb77e48d8c2038ddc307aaf9fa040d3006

  • SHA256

    58cbf7ac3797d7ef1eba20e47e5ec7d35751122304e4f35b7f43e7e3f1787aa9

  • SHA512

    5abbb6e790e1d18b86fba4f042564fdaca5222273ee08794925648153c7c28d25254fff551079ea48c9bd48d987dc65dffc13efc38b3f9cd35a504294f6d4e12

  • SSDEEP

    6144:oL9RwhCDta8Pzy4+r+WLjGJiP7GkAQDzcTw9MBo5oIyx3E5:oBRzDs8byjZqizSQDzv6ck

  Score

  10^/10

  redlinesportdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1