Extracted

• • Target
    file.exe
  • Size 433KB
  • SHA256 5edcb1ddbf28737689a1eb1bbfa8b0a91aad128ef3713b6c390cdc404fe963c9
  • MD5 abbe832b63db6d14b6caf057242f9331
  • SHA1 459178d28384430f766a5dc92c77c519594f7d64
  • SHA512 1bfe7f1a2a3623e372325fc481b6165c17b46dc02e5e4f1e99fa8b02c12a01c12ed73e151499a55ba5ad40f13a5f268790d647ab548deb93004e899815305c82
  • SSDEEP 12288:UDv5HX8G9oZFLpteNtQrOgAGZ/f+G8y8/S:UDBX5GFLHeN6rOSZ+G2/S
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2