Extracted

• • Target
    file.exe
  • Size 497KB
  • SHA256 37666114cff4feada54b1fca17e3947306014ebf6356adde8dec896af842d9c8
  • MD5 9f6cb2c70f146f80a0d07641eae75441
  • SHA1 bc27c3a8afd6ca8ec4c823e504d58518c8ff0cba
  • SHA512 ddaa0de3322522b44748a336b81c27e2e7107a0d099a2db82ad6ac8f5d9f83e2e4b6ff23facaadab898d0e4b01fddb728799a98d244329ad0dce7024e2de93bb
  • SSDEEP 12288:T+H2a5nqxyGEhgghtVkRYgtLo3UDoxupmLav2j:qWQ+yMg/GRJA6oUYLoo
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2