Extracted

• • Target
    file.exe
  • Size 408KB
  • SHA256 dc80eaae4c173a04ce16d100a5ca7e38bac31f2ff620c6e64aa1b75b6de42b0f
  • MD5 ba44c2533403860bfaf3d8a7b8cd61a1
  • SHA1 c2675e5574ea8469ef37beafa4ce5cdafb450128
  • SHA512 09a5f6012d99d7e3c7c471fb065a755610ee6498bc8af76215b11dc7d6f22819842a3f2bac4ced6ec0ce1fc026693914e41c4d6d3934f6f9c508597526b17c45
  • SSDEEP 6144:Rg2LHZ87I+5uSx4ACebNQTMuxNvzZe4sBxIB/oMFdspKawdTmj0WdZY:Rg2bZ8sjSNZ8xpdnsB8QN
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2