Extracted

• • Target
    file.exe
  • Size 466KB
  • SHA256 5132e4e2d8d6379e35b8371778c0c67812b8e34c49f920234191cd8ace5ccda7
  • MD5 839b86878232d0333f57cb0c7e02f176
  • SHA1 1076e1849d7abf9a82e9ef912d79d33dfe048176
  • SHA512 0936acb61c6795b0d0e37a1fdda65b80cbf5f07bc487d7d23d3f88d9e1633b786fdb1e53fb656eac75f7ac079737e3f73ec69c87fc2d60c843dec1e8e6bd5105
  • SSDEEP 6144:2LiuiX34ssml6TC8mXrQpHaIqVM+0pvAuzAT2RqNHjAWTM4xVvkHb+ew:22uiX9sBTCtS6Cvr8TFHXTMENi+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2