Extracted

• • Target
    file.exe
  • Size 364KB
  • SHA256 be83f89b8d89fe4b38210eb67d397d20d94e5fa7415494027315bdf022c2f28e
  • MD5 2b32ce342d6753f3309478a51cfa45c6
  • SHA1 a8dfa45d059034d2ad73d1ebac49f86c18930b48
  • SHA512 636b0d4d262adb08233723df50a919a72e01435f092c579ca3872c6c39c8d51fb123cabc861e0b9d7e5a44c472e06a37ec6bd8bc08a75d9941052b3a042cc01f
  • SSDEEP 6144:W6QLsQU9CJKMem8KUN8Q+TgvIHWtOcfJBLtTYn6CF/lVNXT/kFJ1W:ZQYQU9CJKEi8n1WocTtU6CDD/kX4
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2