Extracted

• • Target
    file.exe
  • Size 391KB
  • SHA256 89b4fd91280acf0a68fa9e24a394c2acd78689d2e5fa9a5ebc4e2cc0baf25c07
  • MD5 09041759154ad537cb9e2d0504838af8
  • SHA1 3a285c5f16abd70b009680c082cd2d900edbac1e
  • SHA512 ba898075af9f4c5b0d31ee9e1d60b91c062be13f64f87be130be90ee1ed35d7d04c6b624f424c011cb66be4110195fc87332a55b62cda9ccd83b1c675a833a69
  • SSDEEP 6144:hML5jVVbcMNmhobsui6JhtcOg6lccvTEEknYk9Ls+tBH5VNKZY:hM9jrkhWJzzXlcITzuJ9rH5z
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2