Extracted

• • Target
    file.exe
  • Size 493KB
  • SHA256 d99b06b0dcfafdb8537e9cc0b6ead609512c3085a1e2aee7c27c64c9accfa183
  • MD5 21c26919f4492aa555b73fcd40d6f694
  • SHA1 5f0c9fe645b9d1f169f4d74f77a95768ce5f1e69
  • SHA512 06da4aa6619be29102c1c7e1ea5e51c61ce73d3a948c2f045ca930c63147eb362a809293a90d1441b78d500eab304203ec7bb525e35e072e2204fa2c0cd03e98
  • SSDEEP 6144:bW5L6w8vfwc9k1A/5zy5g4SecUxE+GMb1TdYB9+6oxupmLaDjT:bW5F8vfwc9Ktg5GE+GMZB6oxupmLa
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2