Extracted

• • Target
    file.exe
  • Size 498KB
  • SHA256 b138115dee877cf4029ba6a224bc2ed3daeaa6d31b2f9a6bce98ecb49cbf5217
  • MD5 1ab5632932261c74b15c71289c102e0f
  • SHA1 08894eee7d0d10042d205bb6b1c408e70613107b
  • SHA512 2cac873e6d4ee028027d91c6d858a68e69ac591a88bfda31e45d40f6529ed0bfefdaeca7a348127de5549d644d4168922ea23213205a38fa1511b8fa0bc1351e
  • SSDEEP 6144:x6LSCuVTM6RzEOlVnveh0laJUbpCJcaoxupmLmc4jT:x6puWeEOlVnDlIcaoxupmLmc
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2