Extracted

• • Target

    29fdb67c6514ccd0a7450c9e0733c2149f45c9bfc6ad604a3177de5d1abce813

  • Size

    381KB

  • MD5

    7b0f625443114e1bc8e226ec6030ad18

  • SHA1

    90a4a6a971c7f53dfd36fbc75a9d700a1108c600

  • SHA256

    29fdb67c6514ccd0a7450c9e0733c2149f45c9bfc6ad604a3177de5d1abce813

  • SHA512

    c44849d42f9f8283544c9ca057d3f315a941797d92e7071903e145c05333d3a4b464f9de142e2f4005a13824b9b087ebae1a96648c3fe605d89552400839cc36

  • SSDEEP

    6144:jj4L+pHeQ7CvEBhrU2Wy9L2qLGicgP1R+JPbCWZY:X46p+Q7IELrU2Wy9LH6izNg

  Score

  10^/10

  redlinesportdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2