Extracted

• • Target
    file.exe
  • Size 474KB
  • SHA256 ae23727ed9bd05baed934101a2910286aa00cd1eeea16e425c407bcd382efa9a
  • MD5 e0c475b440f33a13ed38cb9f84bde4dc
  • SHA1 e171de13ecffbb5059a1126f53a8c4622a2910cb
  • SHA512 508ea1b338962f9cb6af8db442741a5c1dea07a1884bd1290afabbb4731bb80c2d5ad7c261661d1b0769a1970f95b4af2ae0c81d1f9653110ec485f00743c9c1
  • SSDEEP 12288:GzrV9u6JYMzkx2HBFSSWK8JpVDPAyxfV5:G99u6iMzXqSipVDP3xt
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2