Extracted

• • Target
    file.exe
  • Size 467KB
  • SHA256 d4d1dbbed4cd2eb73653409fc82fe62a28cad6e9b607dba875da0acfa6e7baa8
  • MD5 4fc3dbf646303c2e3cf725be459ab067
  • SHA1 a00cdf4b98a3a6091a7f5d98af526e225e33954a
  • SHA512 5232bcf6a7571d34e320493ab1eda14e8895f034366ce12428674967e48a3458f8a26aff2f2adb115d06f4b2e365c28927212bbe363df28f27042aae32f9aa82
  • SSDEEP 6144:tKSLsw8XOqXPOD/TG5dy1EXIK4Rt1fW7MdnjAWTM4xVvkHb+ewx:sS4wivoWdXXIKg1OQRXTMENi+r
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2