Extracted

• • Target
    file.exe
  • Size 402KB
  • SHA256 7d9dfdbe451d7bda9c0ae9f2623797ef472a2a5a57de06e2d1b55e61da5332b7
  • MD5 95e81b89886885f1da093383f86d4dd3
  • SHA1 7c87a76fe9908421a590e9e7e4fcd618eba4361b
  • SHA512 352de9cb919c69c92b928b9bdcfa34b2c6300d15aeca6d16a0d25f898074ae49d6b8b279587b277ca258295f6fdab3cc93a9c89abb3f4c1b2db81398354d7756
  • SSDEEP 6144:0dvLWxzGZ20IMRZgzvSYnBiyEwaKaZp3o5ot+ox3E5:0dvqzGZ9NZgzKYQ1waP
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2