Extracted

• • Target
    file.exe
  • Size 441KB
  • SHA256 e406efaa0f70b29f4c8b18a064aba2ebfe642903dc09148e2b879bad3aca4e39
  • MD5 6b1a4c9b424c38a265b0f9cdda0002ee
  • SHA1 92accceaac462d191845a3f6961f0f5806ed07f8
  • SHA512 30d99a750183e4f27a53602a67c93db95901388608f6fcb385a6e2e771938784c097e53f462772cd35254fca2c6775fa396e91190596455865e885f3259cd143
  • SSDEEP 6144:SkHLjV2Lm0Y5SMO8RkdUAlSiVMa3uLV1qahE9Awo5ot74Gx3E5:SOkLmVVRaUOV213SKY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2