Extracted

• • Target
    file.exe
  • Size 452KB
  • SHA256 c05e392a204e651e7655e07bce1f5e9264567ef830b68b773de06bbf23c5eacd
  • MD5 0c3511c6218e08e14c332c96e7116155
  • SHA1 b80584b701dd1810d8edb46da1752c81a92d266c
  • SHA512 3539e7cd4de728fd1dcbb962f038cdac6d9adec391d6fc499d298212771aed0ee7c278e3b02aed8264d255c9268cee370657fd694dbc3d4dac1ec9d78cd63991
  • SSDEEP 6144:8LwaiAT7s9eECiaLmvom5YKZbWyT9Nkuu/7VfDIBipB1FjAXTM4xVe+ew:8kaiAHTENkW3YYxNS75IcFWTMEQ+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2