Extracted

• • Target
    file.exe
  • Size 449KB
  • SHA256 c139970fa446bf6ec136cb1417fdc9a6d586e8ed8a9180c493f6b47bcae38efd
  • MD5 81d5a3f72e98114fe65e16a8a83aa791
  • SHA1 0c7a25fc9d5f66e46a1d84586d77e8a969906cfb
  • SHA512 28b5036c2e815e6f7638b5a2df8b1cb90d554477287758437dc9abb2d3f2adac693a92185b9f697e72c20a9452bed8d5756dfcfe517806cd0a445e75cdcbcc38
  • SSDEEP 6144:PBErL8VVVKt0RmSI4AACuPX9F1lzRCln2MmRf6gAlNxasW87VdsQuZYw:PB2GVVp6KXl0ARcAu
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2