Extracted

• • Target
    file.exe
  • Size 498KB
  • SHA256 cfbd8cbdc90f4c0afec635a6266dd4e53285acf7ef76d961cb47fc2564c27e0f
  • MD5 506fd7a42b81dd3c55346471307d3332
  • SHA1 efd73eff0986ba82449cf1e73174eb149f3f0fdf
  • SHA512 e3be1689fa14eea13c4510a7e76c14db452297b7ee0449e965e32ea19868ae57e112666532bfc4eb8ac29d8b421d9f59de43406c37fa562bf5e49d1dad19c1e6
  • SSDEEP 6144:rGLsu72A1GQmrsXtlalpr5XStL+eI1I6AEOn1WIXtoxupmL09jT:rGX7l18sdGY0eYTAEeWeoxupmL
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2