Extracted

• • Target
    file.exe
  • Size 440KB
  • SHA256 35a343ff6cd574b86a00f9db497404eae972449448565f9d539bec673b97e776
  • MD5 c88f134ebe41dc23f72b9addd325a152
  • SHA1 8285fa026d00fa7745fd1a55b8c3cd858f199078
  • SHA512 769458898b04d24ac3ce58b118fdc7a9165bd041ee2b11a933e7807ee1d20fbcf893ea6e00b1db00f14048b33d80828cfddc1545026926397f90d6ce21e47b0b
  • SSDEEP 6144:xbXLwKmgsgIFk1bncEe4A8IXaBN/AsfpMPq8xBNZk8UIkEq:xbkKmYIFUcEFhIXaBN/5U7BfYI9q
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2