Extracted

• • Target
    file.exe
  • Size 391KB
  • SHA256 0a689d7bc5c33d8cfc87f70f016eb9fe0d6642903651f0ef22842b06f307f259
  • MD5 7404ed8daf478d32700186025515a481
  • SHA1 1a4c3d3dadf2c71d787fbef8ebad13eb757f2374
  • SHA512 3488bb17e38451f34fb8f8b3275861359bf71b5739f83f813576fae83c041ca75bc834eb907dd30273913c76e9e9f35f61247195de338085c2baa86d4ec1b4c0
  • SSDEEP 6144:/0L1Lk30u9FmUtkXSTHnvOX7BWOPDVps3Use0lV8NJ7YSZY:/05w3nPHzrnvmbAkPYCNN
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2