Extracted

• • Target

    file.exe

  • Size

    413KB

  • MD5

    80c6be28158283c78c34a31754b73303

  • SHA1

    04b53aac5460f2dfa1f822a83e02050c2cbf8e46

  • SHA256

    23fbcec289177668c85a09246769b54b0ca3395f478d0d6d4f0a84a0c49100d7

  • SHA512

    96848a62d81f4f1e7bb8e702867d70956c414d99a396a191a2644cd6ad22416f72e5beb8f32a40e0caa483088b0babbd936304148b25872ddf1ea22812793507

  • SSDEEP

    6144:+DALWFy+VbaypRxT6KNS/gRbwEFTzjFprdxmTwnkHzkSyGZY:mAKFy+DVK5ITXFd2wwW

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2