Extracted

• • Target
    file.exe
  • Size 347KB
  • SHA256 5268b6d24ca9d24c826837a9730e69b3c21fc05fa4e79ee69fd463e8c61f892f
  • MD5 7d27ddcd68d82a95ac674eb28b811620
  • SHA1 765bae6cc60e081aed498c6fad5e42e1de0b9e46
  • SHA512 41e6c8514ee393f4056960017c323d40d4be7bdf0f7eb0248c151eeead666d1c6da56f1aaea935111d74a82e7d1de2c7ffc952228f6afc987eaf82d12e6b73da
  • SSDEEP 6144:5TYLR6UbpzMZhMX4P8vJ51usNYCSqrPOsfO4n4JXbXiP:5TYV6ctKuX4P88sNLPOA34xXi
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2