Extracted

• • Target
    file.exe
  • Size 365KB
  • SHA256 4a4e9d7d337871dc1d6b57436fd8f23c87398dd7731439e4de9ef9e896e1289c
  • MD5 f7cf9de5f6f29f5f44eb61c0997a906f
  • SHA1 894ba39054084fe13d6628a3b6efe587a0c3dc9a
  • SHA512 271863f13ac01c5cf95778804c0ece15d97e0be50d75e4fe9ded6ff4d3a40c8ad68d379b25446e7ddfd857303c2e0a16232a155678d8a9b68fd620ccf83a2d38
  • SSDEEP 6144:+5cL8Yb87lqX6eiVwBMPQXNABIr80kBiWHi8T1CUir/6lWpdykcVWz++d/N6r:CcVb87lqKVVwWQdABu80k3HhIUirS4dy
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2