Extracted

• • Target
    file.exe
  • Size 362KB
  • SHA256 e618373bcb637daae36db8511d2dfdb6a7e227b4e2192af4a6b36be0390616a0
  • MD5 f57fb4cd30baac5530f123563fa8fae7
  • SHA1 bcb0dbe5f85f37f4069e325147f610dae0e6f7b1
  • SHA512 5373e49f4c76f74ddff851f5abe731bf3079fa8d59c3034848958f4fe5c12d5720bc7e31abc554f87bed3b728b4a2a16f58fd718a06396acf3980452549c98bc
  • SSDEEP 6144:SFW0L+493KVNivtHUwZy9wrT5rmTTz7kfcQp2/uEQEqf8oFHuC:SFW06493KAvuwZUKT5r27q0o
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2